topic Re: Access Inside interface from Outside in Network Security https://community.cisco.com/t5/network-security/access-inside-interface-from-outside/m-p/1277952#M809602 <HTML><HEAD></HEAD><BODY><P>Hi Marshall,</P><P></P><P>Thanks for your ideas and suggestions.The link your provided is very helpful.</P><P></P><P>So, My requirement is also the same. I have a PRIMARY SNMP server in INSIDE zone and SECONDARY SNMP server in the OUTSIDE zone.</P><P></P><P>Since both the SNMP server should be configured with the same IP address of the , I should be able to reach the INSIDE interface IP address from the OUTSIDE zone.</P><P></P><P>Hope this configuration should work for my scenario</P><P></P><P>sairam</P></BODY></HTML> Wed, 16 Sep 2009 12:49:17 GMT snarayanaraju 2009-09-16T12:49:17Z Access Inside interface from Outside https://community.cisco.com/t5/network-security/access-inside-interface-from-outside/m-p/1277950#M809576 <P>Hi Experts,</P><P></P><P>I request your help in clarifying the scenario below in FWSM:</P><P></P><P>I want to access my INSIDE interface (ip address 10.1.1.1) from a server located in OUTSIDE interface (ip address 218.248.17.116).</P><P></P><P>I learned that it is not by default possible in FWSM to access an another interface (INSIDE) from one zone (OUTSIDE). </P><P></P><P>Is this possible to achieve if I configure IPSEC VPN in FWSM</P><P>isakmp policy 1 authentication pre-share</P><P>isakmp policy 1 encryption 3des</P><P>isakmp policy 1 group 2</P><P>isakmp policy 1 hash sha</P><P>isakmp enable OUTSIDE</P><P>crypto ipsec tran-set vpn esp-3des esp-sha-hmac</P><P>isakmp key SAIRAM address 218.248.17.116</P><P>access-list TUNNEL extended permit ip host 218.248.17.1 218.248.17.1 255.255.255.0</P><P>crypto map telnet_tunnel 2 ipsec-isakmp</P><P>crypto map telnet_tunnel 1 match address TUNNEL</P><P>crypto map telnet_tunnel 1 set peer 218.248.17.1 </P><P>crypto map telnet_tunnel 1 set transform-set vpn</P><P>crypto map telnet_tunnel interface outside</P><P>telnet 218.248.17.0 255.255.255.0 OUTSIDE</P><P></P><P>Please share your valuable ideas .</P><P></P><P>THANKS IN ADVANCE</P><P></P><P>sairam</P> Mon, 11 Mar 2019 16:15:59 GMT https://community.cisco.com/t5/network-security/access-inside-interface-from-outside/m-p/1277950#M809576 snarayanaraju 2019-03-11T16:15:59Z Re: Access Inside interface from Outside https://community.cisco.com/t5/network-security/access-inside-interface-from-outside/m-p/1277951#M809590 <HTML><HEAD></HEAD><BODY><P>Sairam</P><P></P><P>Have a look at the "management-access" command which allows you to designate an interface that can be connected to from another zone - </P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/command/reference/m.html#wp1637044" target="_blank">http://www.cisco.com/en/US/docs/security/fwsm/fwsm31/command/reference/m.html#wp1637044</A></P><P></P><P>Jon</P></BODY></HTML> Wed, 16 Sep 2009 07:47:06 GMT https://community.cisco.com/t5/network-security/access-inside-interface-from-outside/m-p/1277951#M809590 Jon Marshall 2009-09-16T07:47:06Z Re: Access Inside interface from Outside https://community.cisco.com/t5/network-security/access-inside-interface-from-outside/m-p/1277952#M809602 <HTML><HEAD></HEAD><BODY><P>Hi Marshall,</P><P></P><P>Thanks for your ideas and suggestions.The link your provided is very helpful.</P><P></P><P>So, My requirement is also the same. I have a PRIMARY SNMP server in INSIDE zone and SECONDARY SNMP server in the OUTSIDE zone.</P><P></P><P>Since both the SNMP server should be configured with the same IP address of the , I should be able to reach the INSIDE interface IP address from the OUTSIDE zone.</P><P></P><P>Hope this configuration should work for my scenario</P><P></P><P>sairam</P></BODY></HTML> Wed, 16 Sep 2009 12:49:17 GMT https://community.cisco.com/t5/network-security/access-inside-interface-from-outside/m-p/1277952#M809602 snarayanaraju 2009-09-16T12:49:17Z