I can't getting log and snmp through vpn

[Yasm]

Hello,

I can't getting log and snmp through vpn when i want to reach management interface, either remote acces to asdm and ssh is ok.it's strange thank you for your help.

Best regards,

[Yasm]

With management interface.

[Marius Gunnerud]

do you the command management-access (where managment interface is the interface name) configured on your ASA?

--
Please remember to rate and select a correct answer

[Yasm]

Hello,

Yes

#  show run management-access
management-access DMZ-Administration

Best regards,

[Marius Gunnerud]

Have you verified that the crypto ACLs are correctly configured?  Have you defined that the SNMP server is reachable through the outside interface on the remote ASA?

Please post the full sanitised running configuraiton of devices at both ends of the tunnel.

--
Please remember to rate and select a correct answer

[Yasm]

Hello thank for our reply,

Regarding the crypto ACLs, we reach other site through vpn without problem snmp or log.I will check that we can reach the snmp server through outside interface.

Sorry and i try to recover the running config,

the vpn is defined on outside interface we want to put nat on outside interface in order to reach management interface is it possible ?

Best regards,

[Marius Gunnerud]

the vpn is defined on outside interface we want to put nat on outside  interface in order to reach management interface is it possible ?

Not sure I understand what you want to do here.  Is your outside interface connected to the internet? 

From where do you want to access the ASA management interface (over the VPN, from internet..etc)?  if you want to nat to the inside interface IP, this is not supported.  Management of the ASA on a different interface than the one you entered the ASA on is not supported.

http://www.cisco.com/en/US/docs/security/asa/asa90/configuration/guide/access_management.html#wp1329954

--
Please remember to rate and select a correct answer

[Yasm]

Hello Marius,

Yes we use outside interface connected to internet, we  want to reach management interface through outside interface connected  to internet over vpn with nat.

But if is not supported we have no choise, what we can do ? thank you for our link Cisco

Best regards,

[Marius Gunnerud · Accepted solution]

If you want to access the ASA over a VPN connection, you would not use (or need to use) NAT.  You only need to add the command management-access .

So lets say you want to use the IP associated with the interface named inside to manage the ASA.  You would then enter the command management-access inside

--
Please remember to rate and select a correct answer

[Yasm]

Thank's Marius,

good afternoon.

Best regards,

[Marius Gunnerud · Accepted solution]

Do you require any more assistance with this issue?  If not please select a correct answer and rate any helpful posts.

--
Please remember to rate and select a correct answer