Access ASA5505 with Telnet or ASDM from remote subnet

[Stephane Richard]

Hi,

I have a network with 3 sites that are on different subnets.  Each site has an ASA

Right now, I am only able to connect to the ASA that is connected to the subnet I am connected to.

I want to be able to connect to the ASA that are on the remote subnets on the address of the inside interface.

The sites are connected all together by site-to-site VPN.

Is there any way I can achieve that without opening the outside interface directly on the Internet?

Thank you.           

[Jennifer Halim · Accepted solution]

Yes you can.

On the remote ASA, configure the following:

management-access inside

telnet inside

Assuming that the inside interface of the ASA is part of the crypto ACL.

[nkarthikeyan]

Yes you can do that...... You need to allow management access to the inside interface....

Also i suggest you to have ssh access instead of telnet.....

ssh

Also the acls needs to very clear in allowing the access

The below document clears you better if you go through...

Configuring a Management Interface

To configure the management interface, enter the following command:

Command	Purpose
management access management_interface Example: hostname(config)# management access inside	The management_interface specifies the name of the management interface that you want to access when entering the ASA from another interface.

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/access_management.html#wp1489292