01-21-2013 06:30 PM - edited 03-11-2019 05:50 PM
i set up an asa in my business network , and i have internet service from two ISP
now, i want to manage my asa from internet by ASDM
could i use both the public ip address which i set up in asa outside interface to manage my asa?
the default route on my asa is only direct to one isp
thx for your help!
01-21-2013 08:35 PM
Yes, you can use your outside interface.
Assuming you have ASDM installed and working on the ASA, you would just need to add a statement allowing ASDM access (preferably from a particular address = x.x.x.x 255.255.255.255 but you can open it up to all = 0.0.0.0 0.0.0.0).
In ASDM, you add that via Configuration, Device Management, Management Access. (Reference)
The command line is "http
01-21-2013 10:27 PM
It is ok now
i follow your guide successful to setup dual isp on my asa
but it seems could not access from the backup isp (have not direct a default route ) by asdm?
it is common status? Or it should access from any interface which security-level = 0?
01-22-2013 05:02 AM
Most likely your backup ISP address is not accessible because of the ASA's routing. Packets may come in to that interface but leaving they will follow the default route outbound (from the primary interface), resulting in asymmetric routing and breaking the TCP connection setup.
Please rate your question as answered if your initial question is solved. Thanks.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide