ASA routing

raza555 — Fri, 21 Feb 2020 17:54:49 GMT

Hi,

Is anyone can help me understand that why routing able has the route from 'inside' interface but not from 'management' interface.

Please find below my configs;

interface GigabitEthernet0/1
description inside
vlan 90
nameif inside
security-level 100
ip address 10.10.10.129 255.255.255.248 standby 10.10.10.130

interface Management0/0
management-only
nameif management
security-level 0
ip address 10.20.20.10 255.255.255.0 standby 10.20.20.11

route inside 10.10.0.0 255.255.0.0 10.10.10.131 1
route management 10.10.30.30 255.255.255.255 10.20.20.1 1

ssh 10.10.30.30 255.255.255.255 management

FW/pri/act# sh route 10.10.30.30

Routing entry for 10.10.0.0 255.255.0.0
Known via "static", distance 1, metric 0
Routing Descriptor Blocks:
* 10.10.10.131, via inside
Route metric is 0, traffic share count is 1

Thanks

Re: ASA routing

Rob Ingram — Wed, 12 Feb 2020 10:41:16 GMT

Hi,
The ASA maintains separate routing tables for data and management traffic. You would use the command "show route management-only"

HTH

Re: ASA routing

raza555 — Wed, 12 Feb 2020 10:55:24 GMT

Thankyou 🙂

topic ASA routing in Network Security

ASA routing

Re: ASA routing

Re: ASA routing