topic You can, but it is in Network Security

ASA management interface

mohammad saeed — Fri, 21 Feb 2020 13:31:36 GMT

Hi Guys,

I have one ASA and I want to access to ASA management interface through my inside network, can I do that instead of connect dedicated cable from Management interface to PC?

Thanks for all

Mohammad Saeed

You can, but it is

Marvin Rhoads — Mon, 13 Jul 2015 02:23:40 GMT

You can, but it is challenging to be on a remote subnet. The problem is that as of the current ASA software (i.e version 9.4 or earlier) there is only a single routing table for the ASA.

So it can be challenging to setup routes telling the ASA to reach a given subnet using the management interface when that same subnet may need its data to flow in and out of the inside interface for the non-management functions of the ASA.

You also need to tell the ASA to allow management from subnets not on the same subnet as the management interface.

Marvin is spot on! (+5). I

nspasov — Tue, 14 Jul 2015 05:30:22 GMT

Marvin is spot on! (+5). I would also suggest that you either use a dedicated cable and subnet for the management interface or allow management traffic via the "inside" interface. Be careful as Marvin pointed out there is only a single routing table and assigning an IP address from the same range on your management and Inside interface can cause you to actually drop traffic. I speak from experience...or lack of 🙂

Thank you for rating helpful posts!