Allow management from outside

[lmalhoit]

Hi All,

I would like to temporarily allow asdm managmeent from an external network while I change some IPs for my site-to-site VPN.  I've tried allowing 0.0.0.0/0.0.0.0, but that doesn't work.  When I try to enable the management feature on the outside interface, it gives me an error that says that's not allowed.

Anyone have an idea?  This is an ASA 5505 on version 8.4.

THanks!

[Jouni Forss]

Hi,

The output of the following command should tell us if the ASDM management is enabled and from where

show run http

You can also use the following command to determine on what ports the ASA is listening on

show asp table socket

Usually if you have already setup ASDM to work from somewhere like the "inside" interface and then want to add some allowed network on the "outside" then you can just use this kind of command

http 1.1.1.0 255.255.255.0 outside

That should already allow connectivity with ASDM from the external network  of 1.1.1.0/24

- Jouni

[Marvin Rhoads]

The command would be:

http 0.0.0.0 0.0.0.0 outside

Is that what you're entering?