Configuring Management port on a ASA 5550

Answered Question
Sep 16th, 2010
User Badges:

Hi Everyone,


Can someone tell me how to configure the management port on a ASA 5550.  I assume that by configuring an IP on this port, you can SSH into the device.  Here is the current config:


interface Management0/0
nameif management
security-level 100
ip address 204.62.85.208 255.255.255.0
management-only


Thank you in advance.


Alfred

Correct Answer by Allen P Chen about 6 years 10 months ago

Hello,


To allow SSH, you have to specify the subnet/host you want to allow.  For example:


ssh 192.168.1.0 255.255.255.0 management (will allow all hosts on the 192.168.1.0/24 subnet to SSH into the ASA through the management interface)


Be sure you have the crypto key generated for SSH access:


crypto key generate rsa modulus 1024


Hope that helps!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Allen P Chen Thu, 09/16/2010 - 15:00
User Badges:
  • Cisco Employee,

Hello,


To allow SSH, you have to specify the subnet/host you want to allow.  For example:


ssh 192.168.1.0 255.255.255.0 management (will allow all hosts on the 192.168.1.0/24 subnet to SSH into the ASA through the management interface)


Be sure you have the crypto key generated for SSH access:


crypto key generate rsa modulus 1024


Hope that helps!

dacruzer1 Thu, 09/16/2010 - 15:57
User Badges:

Hi Allen,


Thanks for the quick response, that works!


Do you know where I can get information on how to configure an ASA 5550?  I have a PIX 525 that will be replaced with the ASA but I want to go through the details of properly configuring the ASA.


Thanks again,


Alfred

Allen P Chen Thu, 09/16/2010 - 16:17
User Badges:
  • Cisco Employee,

Hi Alfred,


Glad to hear that resolved the issue.  What software version are you running on the ASA?  Here is the link to the official configuration guides for the ASA:


http://tinyurl.com/yrhv8z


Here are configuration examples to various features on the ASA (NAT, failover, VPN, etc)


http://tinyurl.com/n8u2a


Thanks!

Actions

This Discussion