Cisco ASA VPN - Management Access

[beejrteek]

Hello Everyone!

I have a strange problem. I configured RA VPN (SSL) on my Cisco ASA 5506, everything works fine except management access to my ASA........

I have configured this commnad:

management-access lab

ssh 0.0.0.0 0.0.0.0 lab

nat (lab,outside) source static any any destination static VPN-Network_Obj VPN-Network_Obj no-proxy-arp route-lookup

But I can't still log in to my ASA...

Any idea ? 

[MHM Cisco World]

check below

[beejrteek]

I only add this for testing purpose because it is dangerous, but still not working

To be precision: I always try to connect to LAB interface which has this IP: 10.10.10.1

[MHM Cisco World]

sorry for late reply,
https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/215442-configure-anyconnect-management-vpn-tunn.html

this steps use to access ASA via anyconnect, 
so it better to config group-policy for specific anyconnect which have a privilege admin to access ASA

[beejrteek · Accepted solution]

MHM Cisco World,

Sorry but management vpn tunn has another function and this is not a solution.

It was a bug in version 9.8.4(32) - after upgrade to 9.16 - configuration:

management-access lab

ssh 0.0.0.0 0.0.0.0 lab

nat (lab,outside) source static any any destination static VPN-Network_Obj VPN-Network_Obj no-proxy-arp route-lookup

Working good

[MHM Cisco World]

ssh 0.0.0.0 0.0.0.0 lab <<- I suggest this before you mention it dangerous.
anyway 
glad your issue solve 
 really appreciate you to update me 
have a nice day 
MHM