topic Management Interface on ASA/IPS in Network Security

Management Interface on ASA/IPS

GRANT3779 — Sun, 10 Mar 2019 13:03:21 GMT

Hi All,

I have a 5515x ASA with the IPS.

Is there anything specific I need to do with regards to configuring the MGMT Interface as I know both the ASA and IPS will be configured with a different IP address, although physically sharing the same Management Interface. I know how to assign the IP address but apart from that, are there any other commands / config to do so I can access both the ASA and IPS via their seperate IP addresses?

Thanks

Re: Management Interface on ASA/IPS

Tariq Bader — Sat, 21 Sep 2013 00:09:24 GMT

as long as you specified the IP address for the IPS management and enabled the managment access to it from the initial setup, that is it. You can access it from the allowed host/netowrks,

http://www.cisco.com/en/US/docs/security/ips/6.0/configuration/guide/cli/cliInit.html#wp1043876

Web access to the IPS is enabled bydefault.

Telent is disabled by default.

The most important thing is to specify the allowed hosts and networks to access and manage the IPS (management access-list). This can be done from the initial setup of the module or from the CLI as following example:

conf t

     service host

          network-settings

access-list 10.0.0.0/8

                    access-list 10.89.0.0/16

                    access-list 64.101.0.0/16

                    access-list 10.89.149.31/32

                    access-list 64.102.0.0/16

Management Interface on ASA/IPS

manjeets — Fri, 07 Feb 2014 12:42:53 GMT

Kindly review the below link as well :

http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_tech_note09186a0080bd5d03.shtml