topic Allow management from outside in Network Security

Allow management from outside

lmalhoit — Tue, 12 Mar 2019 02:20:03 GMT

Hi All,

I would like to temporarily allow asdm managmeent from an external network while I change some IPs for my site-to-site VPN. I've tried allowing 0.0.0.0/0.0.0.0, but that doesn't work. When I try to enable the management feature on the outside interface, it gives me an error that says that's not allowed.

Anyone have an idea? This is an ASA 5505 on version 8.4.

THanks!

Allow management from outside

Jouni Forss — Thu, 01 Aug 2013 14:58:18 GMT

Hi,

The output of the following command should tell us if the ASDM management is enabled and from where

show run http

You can also use the following command to determine on what ports the ASA is listening on

show asp table socket

Usually if you have already setup ASDM to work from somewhere like the "inside" interface and then want to add some allowed network on the "outside" then you can just use this kind of command

http 1.1.1.0 255.255.255.0 outside

That should already allow connectivity with ASDM from the external network of 1.1.1.0/24

- Jouni

Re: Allow management from outside

Marvin Rhoads — Thu, 01 Aug 2013 15:25:27 GMT

The command would be:

http 0.0.0.0 0.0.0.0 outside

Is that what you're entering?