Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Cisco ASA Management Interface/Network

Status
Not open for further replies.

rbergfeld

IS-IT--Management
Oct 17, 2007
8
0
0
US
We have an ASA 5520 setup in a one-armed firewall(checkpoint) configuration.

I have an internal Management network (10.34.4.x)

Here is my management interface config:
!
interface Management0/0
nameif management
security-level 100
ip address 10.34.4.13 255.255.255.0
management-only
!

My problem is that I cannot access other management IP addresses while I'm connected to the vpn.

My assumption is that the ASA has a direct connection to the 10.34.4.x network and tries to route that traffic over that interface but since it only allows inbound connections, it's dying on the ASA.

Could someone point me in the right direction? I just want to be able to hit other management ip's while on the vpn without having to access a management station on the internal network.

 
Is the 10.34.4.0 255.255.255.0 network part of the interesting traffic for the VPN? Is it exempted from nat to the VPN network?

Brent
Systems Engineer / Consultant
CCNP, CCSP
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top