management port asa 5510

[binoyjosephstanly]

hi all

is it possible to assign an ip address from inside ip range to the management port also.pls suggest

Regards

Binoy

[Fernando_Meza]

Hi ... no you can't .. it has to be on a different segment. The management interface allows communication to the ASA only it does not allow traffic to traverse from the Management interface to the others. The best pratice is to keep your management VLAN o segment dedicaded for management purpose only.

I hope it helps .. please rate it if it does !!!

[a.kiprawih]

Actually you can, and it allows you to access the ASDM as well. You can limit/specify who can access the management port.

But from security point, this is not recommended as other users can 'see' this port. You should assign the interface IP to a dedicated management subnet/vlan.

Cheers!

AK