02-20-2021 11:16 AM - edited 02-20-2021 11:17 AM
Can't seem to wrap my head around this...
There's an ASA 5506-X sitting on my desk directly connected to my laptop.
I'm having no issue connecting to ASDM when the laptop is connected to the management interface. However when I connect the laptop to the inside interface, I get an ASDM error "Unable to launch device manager from 192.168.10.1".
I've configured multiple ASAs in the past and I've never encountered this. I need to be able to access ASDM from the inside, not just from the management interface.
I can ssh and ping to the inside interface from the laptop.
Here's the related configs:
int g0/0
nameif inside
ip addr 192.168.10.1 255.255.255.0
no shut
!
http server enable
http 0 0 inside
02-20-2021 11:44 AM
Config looks ok
int g0/0
nameif inside
ip addr 192.168.10.1 255.255.255.0security-level 100 < add this line
no shut
Try remove http config and add back
no http server enable
no http 0 0 inside
http server enable
http 0.0.0.0 0.0.0.0 inside
try from Pc https://192.168.10.1 ?
02-20-2021 04:38 PM - edited 02-20-2021 04:46 PM
This did not resolve the issue.
02-21-2021 02:39 AM
Post complete configuration of ASA, show version to look what wrong?
1. are you able to ping ASA IP address?
2. from ASA are you able to ping the device IP address
3. what is the PC gateway? is the ASA IP address?
02-21-2021 05:02 PM - edited 02-21-2021 05:12 PM
As stated in the original post, I am able to ping the ASA inside interface from the PC.
I am also able to ping the PC from the ASA.
The gateway of the PC is set to the ASA's inside interface.
***I'll post both the show run and show version tomorrow.
02-22-2021 02:39 AM
Sure post complete configuration to understand the issue.
02-21-2021 12:51 AM
Hello
Your config looks good.
Try to upgrade your Code to a new version.
Best regards
02-21-2021 05:12 PM
I suspected it may be some issue with the current ASA version... Note that this is a straight out-of-the-box new ASA 5506-X purchased from Cisco. However, I've received multiple 5506-X in the past, and never encountered this issue.
I'll try upgrading it, if all else fails.
02-23-2021 05:31 AM
Make sure to check the compatibility matrix to be sure that the ASDM version you are running is also compatible with the ASA version.
https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html#id_65776
02-23-2021 11:50 AM
This could confirm what I suspect!
Please try it. I don't see any issue on your configuration or the ASDM image because you can access it from the Management interface.
let us know!
Best regards
02-21-2021 12:54 PM
Run the command show run asdm and dir.
Without seeing your complete configuration, a possible issue could be that you either not have an ASDM image configured, the ASDM image is not present in flash, or the ASDM image is corrupt or not supported by the ASA version.
02-21-2021 05:09 PM
I mean, I'm able to access ASDM when the PC is connected via the management interface. In my mind, if this was an ASDM image issue, I wouldn't be able to access ASDM at all, right?
Again: I'm only able to access ASDM from the management interface, when I disconnect my PC from the management interface and connect it to the inside interface, I get the "Unable to access device manager..." error (and yes, I reconfigure the PC's IP configuration accordingly).
Not my first rodeo with ASAs, but I've never encountered this issue before. There seems a bunch of similar issues on these boards, but none that only allows ASDM access via management, and errors out for inside.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide