ASA Management port with different route

[Machi Ma]

Hi,

I have some ASA 5510 in under setup now.  I got some problem and I would like to connect the Management0/0 to Interenet but it will not same is subnet of "outside" interface.  What should I do.  Following is my part of interface setup:

-------------------------------

!

interface Ethernet0/0

nameif outside

security-level 0

ip address 222.53.77.234 255.255.255.252

!

!

interface Management0/0

nameif management

security-level 100

ip address 202.177.223.1 255.255.255.0

management-only

!

route outside 0.0.0.0 0.0.0.0 222.53.77.233 1

aaa authentication ssh console LOCAL

----------------------------------

I am able to connect with ethernet0/0 interface.  But however, it did not able to connecting with Management0/0.  How should I setup to be allow?

Thanks!

[Julio Carvajal]

Hello,

U should plugging a laptop to managment 0/0 and then from that laptop connect to 202.177.223.1.

that interface has the management-access only so no routed traffic can reach that.

Regards,

Jcarvaja

[narawat]

Hi Machi,

     Please let me know if i understand your problem correctly:

you want to connect a machine to management interface and want to access internet from there.

For this you would need to make the management interface to be able to use as a data interface by "no management-only" and it you are using Private IP addressing in management interface than you need to add a dynamic NAT for the traffic else we dont need to NAT the traffic.

Please explain the issue with the help of a topology diagram if above is not the case.

Cheers,

Naveen

[Machi Ma]

Hello,

Thanks for advise.  However, the Managment interface I will plan to connect to the "back door" which can allow to access from outside directly.  ie.  The outside interface will connecting to primary Internet and management interface will connecting to another ISP which work as a "back door".

Please let me know if still not clear about my idea and I can share more for you.

Thanks!