Using ASDM to allow management-access inside and removing cause network outage.

[Eric Boadu]

Hello Guys,

I enabled management-access inside (Did not work) and removing that config on PIX 525 ASDM under the management interface causes network outage. Some systems were not able to communicate via static nat one-to-one mapping over the Internet. Onside Engineer who is more familiar with the network confirm that couple access-group lines were either overwrought or removed when I deleted management-access inside. (issue is resolved by adding the missing access-group lines)

My question is: Enabling and removing management-access can some how delete the access-list or group? Has any one out there had this issue before? or perhaps I should have done this through the console which is what I do mostly. Please your advice and all possibilities is welcome using ASDM.

Thanks,

Eric

[Federico Coto Fajardo]

Hi,

The management-acess inide command is just to allow management of the inside interface from the outside world (most likely through VPN).

It has nothing to do with any ACLs configured on the ASA or Firewall.

I've always done it via the CLI and it worked perfectly.

Give it a shot from CLI and you would be able to access the inside interface from a remote location (and it won't affect the ACLs).

Let me know how does it goes.

Federico.