FWSM, allowing remote management.

[andrea.meconi]

Hello.

I'm using a FWSM with multiple contexts. One of these contexts serves CiscoWorks LMS.

I need to manage all others contexts on outside interface using insecure protocols, like SNMP or Telnet.

I have tried to setup a VPN L2L connection between contexts without success.

Any idea?

Thanks.

Andrea

[Marvin Rhoads]

The FWSM doesn't support VPNs.

You'll need to create rules (access lists) allowing communications between the tiers (contexts) for LMS to reach them via the desired protocols.

[andrea.meconi]

Hello Marvin and many thanks for your help.

The FWSM supports IPSec for management access. You can configure site to site or remote access VPN.

I have configured a remote access VPN, and using Cisco VPN client I can manage a context using Telnet on outside interface.

However, in case of the FWSM, the only address available on the module end of the tunnel is the interface itself.

This is because a site to site VPN doesn't work, using NAT also.

Regards.

Andrea