Access to the MGMT interface

mfruvous — Mon, 11 Mar 2019 16:36:16 GMT

Hello,

I have and ASA 5510 and would like to be able to access the MGMT network including the AIP-SSM module from the internal network. I am a Cisco newbie.

Mgmt port: 192.168.22.1

AIP SSM Mgmt port: 192.168.22.254

Internal network: 192.168.1.0/24

I can create the access-list okay but I am having trouble setting up the NAT. The error is â€œportmap translation creation failed for tcp src Internal 192.168.1.17/1098 dst management:192.168.22.254.â€

Is what I would like to do even possible? And if so, what would the NAT be?

Thank you in advance.

Andrea

Re: Access to the MGMT interface

cmcbride — Fri, 06 Nov 2009 21:10:32 GMT

Well to configure no nating between the interfaces it would be:

access-list nonat-inside permit ip 192.168.1.0 255.255.255.0 192.168.22.0 255.255.255.0

access-list nonat-mgmt permit ip 192.168.22.0 255.255.255.0 192.168.1.0 255.255.255.0

nat (mgmt) 0 access-list nonat-mgmt

nat (inside) 0 access-list nonat-inside

topic Re: Access to the MGMT interface in Network Security

Access to the MGMT interface

Re: Access to the MGMT interface