configure ASa 5505 from remote site using ASDM

Answered Question
Jul 6th, 2010
User Badges:

I would like to be able to administer the ASA 5505 from another site, which is linked via a site to site Ipsec LAN.


How do I enable this feature?

Correct Answer by Federico Coto F... about 6 years 10 months ago

Hi,


You can administer an ASA remotely by using the public IP (via the Internet), or via the tunnel by reaching the private IP.


You can reach the private IP by enabling the command:

management-access inside


Then you can access the ASA by its private IP via CLI or GUI.


Federico.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Gaston Bougie Tue, 07/06/2010 - 13:56
User Badges:

You have to let the asa know from which interface you may manage the asa via vpn.

check out the commando "management-access".

if you want to configure your remote asa on his inside interface, you configure: "management-access inside"


Also check your acl and nat.

Correct Answer
Federico Coto F... Tue, 07/06/2010 - 13:56
User Badges:
  • Green, 3000 points or more

Hi,


You can administer an ASA remotely by using the public IP (via the Internet), or via the tunnel by reaching the private IP.


You can reach the private IP by enabling the command:

management-access inside


Then you can access the ASA by its private IP via CLI or GUI.


Federico.

mawallace Tue, 07/06/2010 - 14:59
User Badges:

Right - so that I have it clear in my mind


ASA I want to access at Site A - the "inside" network and ip address is 192.168.30.1


The site from which I am connecting is one the 192.168.1.1


So..


On the ASA I issue the managment-access inside command


and then I simply add the 192.168.1.1 address to the list of sites from which I am allowed to connect? I can then connect via the VPN link?

Federico Coto F... Tue, 07/06/2010 - 15:34
User Badges:
  • Green, 3000 points or more

Correct.

Assuming the ASA allows the management access from the IP that you're coming from.


Federico.

Actions

This Discussion