Route inside traffic out management interface

[christians1]

Hello,

I have a need to temporarily route inside traffic out a management0/0 interface on a Cisco ASA. ASA5525 Version 9.1(6)10.

Basically there is a network off the management interface that inside users need to get to.

So if I do a "route management 10.10.10.0 255.255.255.0  10.95.95.10"

Will the traffic from inside interface be able to travers out the management0/0 interface to the 10.10.10.0/24 network?

I do have this enabled = same-security-traffic permit inter-interface

If I can do this. Then, can I nat inside traffic out the management0/0 interface? And if so, what nat commands would i be able to use to source nat to the management interface?

Thanks!

[Marius Gunnerud]

You will also need to issue the command "no management-only" to allow the management port to forward data traffic.

Also, keep in mind that once you apply an ACL to the interface then security levels are no longer in effect (until you remove the ACL again).  So if you do have ACLs configured on the inside interface then make sure to allow this traffic there.

--

Please remember to select a correct answer and rate helpful posts