topic Re: ASA5505 Managment on Outside Interface in Network Security

ASA5505 Managment on Outside Interface

sjoyce — Mon, 11 Mar 2019 16:26:49 GMT

Is it possible to manage the ASA5505 via the outside interface. We are setting up a VPN Tunnel between to ASA5505s and the INSIDE interface on the remote ASA will be connecting to another network which we have not control of.

Thanks Mucho!!!

Re: ASA5505 Managment on Outside Interface

JORGE RODRIGUEZ — Fri, 16 Oct 2009 17:58:50 GMT

If you are trying to manage firewall through ipsec tunnel you shoudl still have control of your inside interface and manage it through that interface..

management-access inside

and allow the host that needs to manage the firewall for telnet and http etc..

if the host is not part of that ipsec tunnel but needs to manage the firewall, then you can manage it through oustide interface by simply allowing that host in your http and telnet statements.

i.e

http outside

etc..

Regards

Re: ASA5505 Managment on Outside Interface

Collin Clark — Fri, 16 Oct 2009 18:00:47 GMT

From the outside you can use SSH, VPN, or ASDM. Here's how to configure SSH.

PIX(config)#hostname PIXOne

PIXOne(config)#domain-name mydomain.com

PIXOne(config)#crypto key generate rsa

PIXOne(config)#ssh time-out 60

PIXOne(config)#ssh [your public IP] 255.255.255.255 outside

Hope that helps.

Re: ASA5505 Managment on Outside Interface

sjoyce — Fri, 16 Oct 2009 19:22:06 GMT

Jorge, thanks for your reply. Sometimes the easy fixes appear as real problems.

Thanks Mucho!!!

Re: ASA5505 Managment on Outside Interface

sjoyce — Fri, 16 Oct 2009 19:28:04 GMT

Collin, thanks for your reply. Sometimes the blinding obvious escapes one!

Thanks Mucho!!!