ASA Subinterface management Access

[vipinrajrc]

Hi Experts,

Is it possible to configure a inside subinterface only for management purpose (Telnet/SSH)???? Also i need to access the ASA using this subinterface through VPN... Could anyone tell me aht is the procedure for this???

Regards,

Vipin

[sean_evershed]

Hi,

In answer to ts it possible to configure a inside subinterface only for management purposes. Here is an example:

hostname(config)# interface gigabitethernet0/2.1

hostname(config-subif)# management-only

For VPN access see the link below:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/access_management.html#wp1064497

hostname(config)# management access management_interface

where management_interface specifies the name of the management interface you want to 

access when entering the security appliance from another interface.

You can define only one management-access interface.

Please remember to rate all posts that are helpful.

[vipinrajrc]

sean_evershed wrote:
Hi,
In answer to ts it possible to configure a inside subinterface only for management purposes. Here is an example:
hostname(config)# interface gigabitethernet0/2.1
hostname(config-subif)# management-only
For VPN access see the link below:
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/access_management.html#wp1064497
hostname(config)# management access management_interface

where management_interface specifies the name of the management interface you want to 
access when entering the security appliance from another interface.
Please remember to rate all posts that are helpful.



You can define only one management-access interface.

Hi

when i tried to configure the sub interface it asks for nameif and vlan.... i gave a name for that subinterface... but my doubt is what should i put in the place of vlan-id???

anyone please suggest the right path???

Thanks&Regards

Vipin