10-12-2006 02:45 AM
I i try to ssh or get asdm through my vpn tunnel on the inside pix interface. Unfortunately it doesn t work for any reason. However i can ping the inside ip address on the inside pix interface which is 192.168.21.1.
I ve enable the option management-access inside
ssh 0.0.0.0 0.0.0.0 inside
management-access inside
http 0.0.0.0 0.0.0.0 inside
http enable
here are the access-list if that can help
access-list http-list2 extended permit ip any any
access-list UKDEVPN extended permit ip object-group UKInside object-group DEOffice
access-list UKUKOFFICEVPN extended permit ip object-group UKInside object-group UKOffice
access-list inside_nat0_outbound extended permit ip object-group UKInside object-group DEOffice
access-list inside_nat0_outbound extended permit ip object-group UKInside object-group UKOffice
access-list inside_nat1_outbound extended permit ip object-group UKInside any
access-list inbound extended permit tcp any object-group UKOutEx eq smtp
access-list inbound extended permit tcp any object-group UKOutEx eq pop3
access-list inbound extended permit tcp any object-group UKOutEx eq https
access-list inbound extended permit tcp any object-group UKOutEx eq imap4
access-list inbound extended permit tcp any object-group UKOutEx eq ssh
access-list inbound extended permit tcp any object-group UKOutEx eq 995
access-list inbound extended permit icmp object-group PublicUKOffice object-group UKOutEx
access-list inbound extended permit icmp any any echo-reply
access-list inbound extended permit icmp any any source-quench
access-list inbound extended permit icmp any any unreachable
access-list inbound extended permit icmp any any time-exceeded
access-list inbound extended permit icmp any any
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 access-list inside_nat1_outbound
I m wondering if i ve to add an access-group outbound in inside and allowing anything on it might fix the issue or is it something else?
Thanks in advance for your help
10-12-2006 04:09 AM
Try following command in configuration mode
management-access inside
M.
Hope that helps rate if it does
10-13-2006 07:31 AM
thanks for you answer but i ve already tried this and it still doesn t work. As you can see on my post management-access inside is enable
Alex
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: