topic Site to Site Tunnel on Management Interface in Network Security

Site to Site Tunnel on Management Interface

cslitb — Mon, 11 Mar 2019 19:30:15 GMT

I currently have a site to site tunnel configured between a Pix 515e and ASA 5520. I am currently tunneling traffic from two interfaces on the ASA 5520 to the Pix 515e. Does anyone know if you can tunnel traffic from the Management 0/0 interface of the ASA 5520 to the Pix 515e? I have not been able to get it to work. I have applied the no management-only command on the Management 0/0 interface.

Re: Site to Site Tunnel on Management Interface

Ivan Martinon — Tue, 04 Jan 2011 19:05:07 GMT

This is expected behavior, traffic will not flow through the interface Management unless it is defined as no management interface.

Re: Site to Site Tunnel on Management Interface

cslitb — Tue, 04 Jan 2011 19:21:49 GMT

On the Management Interface, I have issues the no management-only command. Is there something else I need to do to remove the management only functions?

Re: Site to Site Tunnel on Management Interface

Ivan Martinon — Tue, 04 Jan 2011 19:23:28 GMT

Just issueing "no management-only" should allow traffic to go through, assuming all other setting are complete.

Re: Site to Site Tunnel on Management Interface

cslitb — Tue, 04 Jan 2011 19:32:37 GMT

I can access devices on the Management 0/0 interface from the Inside Interface, so the Managament Interface is passing traffic. Any other ideas?

Re: Site to Site Tunnel on Management Interface

Ivan Martinon — Tue, 04 Jan 2011 19:34:31 GMT

So what happens is that traffic that is on the management interface cannot reach the network on the 515 side via de vpn tunnel so far? if that is the case, do you have the proper crypto acls and no nat statements defined? can you post your config?