Need to reach internal network without Anyconnect VPN

[Alok.Prabhakar]

Hi All,

Wanted to know if any software/hardware to reach the internal network (DC devices) when the Anyconnect VPN is down/not reachable.
(By passing the VPN so that we can connect for troubleshooting purposes.)

[MHM Cisco World]

as VPN or as mgmt ?

[Alok.Prabhakar]

Mainly for mgmt puposes. So that we can get access to the devices with connecting VPN

[MHM Cisco World]

so SSH is not optional here ?

[Alok.Prabhakar]

SSH would be helpful. But without VPN connected we would not be able to SSH into the devices, wanted to change that when VPN is down so that we can login to them.

[MHM Cisco World]

you can, what you need only is NATing in ASA
SW private IP -> NATing ASA port 22 -> public IP 
when you not connect via VPN you can use public IP of ASA using port 22 access to SW private IP.

[Alok.Prabhakar]

Sorry forgot to mention, we have FTDs managed by FMC.
We would also like to get access to other devices like routers and switches in DC not just Firewall.

[MHM Cisco World]

router1 private IP port 22 -NATing -> public IP port 1022 
router2 private IP port 22 -NATing-> public IP port 2022
..etc. 
each one have it port to access.

[Alok.Prabhakar]

Thank you. But my public IP keeps changing right and also we need to make changes on FMC(not in FTD CLI) is what TAC informed.

[MHM Cisco World]

public IP keep changing Need then VPN. 
anyconnect NO 
then last as I know is using flexVPN remote access