Cisco ASA 5512 - Internet access on management interface

[Frank Nilsen]

Hi.

Not sure if this is the right community, but I'll try.

The issue is internet Connectivity on the management Interface (physical port) on a ASA 5512-X - Se Attachment for topology.

I have set it up with different vlan interfaces (se attachment) and internet is working on all the VLAN's, but not on the management. (VLAN30)

Is this by design, or is it something I am missing?

Here are my NAT rules:
nat (management,Outside) source dynamic any interface description Internet for Management_VLAN
nat (Inside_Camera,Outside) source dynamic any interface description Internet for Server_VLAN
nat (Inside_Leilighet,Outside) source dynamic any interface description Internet for Server_VLAN
nat (Inside_WIFI,Outside) source dynamic any interface description Internet for Server_VLAN
nat (Inside_Server,Outside) source dynamic any interface description Internet for Server_VLAN
nat (Inside_Client,Outside) source dynamic any interface description Internet for Server_VLAN

ASA Version 9.3(1)

Any ideas anyone?

[Marvin Rhoads]

That's what a lot of people do - use either one of the production interfaces for management or setup another one for "in band" management. The physical management port has limitations that often have most people leaving it unused.

Please take a moment to mark any helpful answers as such.