ā11-05-2020 08:47 AM
If I have some static routes on my ASA like this
route management 0.0.0.0 0.0.0.0 x.x.x.x
route outside 0.0.0.0 0.0.0.0 x.x.x.x
and say I don't have no NAT-ing in place, is it possible that some traffic coming from the inside interface choose to go out of management interface?
Solved! Go to Solution.
ā11-05-2020 10:04 AM - edited ā11-05-2020 10:16 AM
There are 2 routing tables, management and data routing table. The management routing table is for traffic originating from the ASA and the data routing table is for traffic through the ASA.
I assume you've defined "management-only" under the management interface? In which case you confirm it's routing table using "show route management-only".
Traffic from inside interface will only be sent via the data routing table, not via the management routing table.
HTH
ā11-05-2020 09:16 AM
It should your default route to outside - best to confrime what version of ASA code you are running ?
ā11-05-2020 10:01 AM
You can do policy based routing to regulate the traffic to the interface you want
ā11-05-2020 10:04 AM - edited ā11-05-2020 10:16 AM
There are 2 routing tables, management and data routing table. The management routing table is for traffic originating from the ASA and the data routing table is for traffic through the ASA.
I assume you've defined "management-only" under the management interface? In which case you confirm it's routing table using "show route management-only".
Traffic from inside interface will only be sent via the data routing table, not via the management routing table.
HTH
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide