Connect to firewall SSH or ASDM from VPN

[Brendan Wood]

Hello,

I've created an AnyConnect VPN which the client is assigned an IP from the IP Pool 10.20.20.0/255.255.255.224.

I've tried to create an entry in the management access tab with the following settings, and it is not working;

Type:ASDM/HTTPS, Interface:Inside, IP Address 10.20.20.0, Mask: 255.255.255.224.

I've also tried setting the interface to outside - no improvement.

Any tips are welcome.

[Julio Carvajal]

Hello,

What version are you running, are you able to ping the inside interface from the anyconnect client?

[Javier Portuguez · Accepted solution]

Hi Brendan,

Please check these three basic things:

1- The internal network of the ASA is included in the split-tunnel ACL (if configured).

2- Make sure you have the following command: management-access inside

3- Make sure that the identity NAT entry for this traffic has the route lookup at the end. *

     ie. nat (inside,outside) source static LAN LAN destination AnyConnect AnyConnect no-proxy-arp route-lookup *

* Assuming that you are running 8.4+

HTH.

Portu.

[Brendan Wood]

Thanks Javier.

[Brendan Wood]

It was actually the management-access inside that was not set.  Everything is fine now, thanks.

[Javier Portuguez]

Great

Keep it up!!