cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
489
Views
0
Helpful
3
Replies

i want to manage my asa from the internet

dmifly.chuang
Beginner
Beginner

i set up an asa in my business network , and i have internet service from two ISP

now, i want to manage my asa from internet by ASDM

could i use both the public ip address which i set up in asa outside interface to manage my asa?

the default route on my asa is only direct to one isp

thx for your help!

3 Replies 3

Marvin Rhoads
VIP Community Legend VIP Community Legend
VIP Community Legend

Yes, you can use your outside interface.

Assuming you have ASDM installed and working on the ASA, you would just need to add a statement allowing ASDM access (preferably from a particular address = x.x.x.x 255.255.255.255 but you can open it up to all = 0.0.0.0 0.0.0.0).

In ASDM, you add that via Configuration, Device Management, Management Access. (Reference)

The command line is "http

"

It is ok now

i follow your guide successful to setup dual isp on my asa

but it seems could not access from the backup isp (have not direct a default route ) by asdm?

it is common status? Or it should access from any interface which security-level = 0?

Most likely your backup ISP address is not accessible because of the ASA's routing. Packets may come in to that interface but leaving they will follow the default route outbound (from the primary interface), resulting in asymmetric routing and breaking the TCP connection setup.

Please rate your question as answered if your initial question is solved. Thanks.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers