ASA firewall and management network problem

[Julian Regel]

Hi.

I have a Cisco ASA 5510 (Security Plus) and have interfaces configured for external network (e0/0), DMZ (e0/1) and internal network (e0/2).

We also have a management network that is separate from our internal network. This has a subnet of 192.168.10.0/24. The management interface (management0/0) of the ASA is connected to this network.

I want to be able to configure certain hosts on the internal network to be able to access devices on the management network. I connect the management network to e0/3 on the ASA, but when I try the interface an IP address, I get:

"The IP address, 192.168.10.x/255.255.255.0, cannot overlap with the subnet of interface ASA_Management".

I can understand why this is a problem, but don't know how to achieve the aim of using the ASA to provide firewalling and routing to the management network, as well as having the ASA's management interface on the management network as well.

Any help appreciated!!

Thanks

JR

[varrao]

Hi Julian,

You would need to apply the command:

no management-only

If you want to use the port for data traffic as well.

and also can you share the output of "show run interface"

Thanks,
Varun Rao
Security Team,
Cisco TAC