Access 5508-X GUI (192.168.1.1) via any IP on 10.0.2.x

[fbeye]

Hello

Currently to access my 5508-X GUI (ASDM) I am using any IP on the 192.168.1.x

interface GigabitEthernet1/2
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0

That GE 1/2 goes to a Catalyst Switch which has a vlan ip address of 192.168.1.5 but any device connected to GE 1/0/21-1/0/24 grabs a 192.168.1.x IP address.

The rest of the Catalyst is connected as such (L2) .  1/0/1-1/0/10 vlan 10 (for 10.0.1.x IP's which come from 5508-X 1/3) and then 1/0/11-1/0/20 vlan 11 (for 10.0.2.x but comes from a 3rd party Router elsewhere). The 10.0.2.x communicates with the other subnets via 1/4 on the 5508-X being 10.0.2.124 as an access / routable interface.

Long story short is I generally am on the 10.0.2.X network and want to be able to access the ASDM on the 192.168.1.1 5508-X.

10.0.2.124 is the IP on the 5508-X that would be the 10.0.2.x's gateway TO the 5508-X.

Is there a way to allow ASDM access to 192.168.1.1 from 10.0.2.x via 10.0.2.124 (GE 1/4 5508-X)

[Richard Burts · Accepted solution]

Yes it is possible and should be pretty easy. Look into the current running config and you should find a line for http inside 192.168.1.0. It uses the interface name on the ASA and the subnet that are allowed to access the GUI. Add a similar line that references the interface name of GE1/4 and 10.0.2.0.

[fbeye]

Thank you, that worked fine.

[Richard Burts]

You are welcome. I am glad that my suggestion was helpful.