Provided that management connections are coming from a source address that is already configured on the L2L VPN and naturally that the destination address (Hub ASA interface IP) is also part of the current L2L VPN then you would essentially only need to add
management-access
Which would allow management connections through the L2L VPN to this internal interface
You would also need the appropriate statement to allow the ASDM management
http inside
I think you needed to use the "inside" at the end. Can't remember. Try "outside" if that doesnt work.
Naturally if you have any kind of VPN Filter ACLs or if you are preventing the default operation of VPN traffic bypassing external interface ACL then you will also have to allow the traffic.
Provided that management connections are coming from a source address that is already configured on the L2L VPN and naturally that the destination address (Hub ASA interface IP) is also part of the current L2L VPN then you would essentially only need to add
management-access
Which would allow management connections through the L2L VPN to this internal interface
You would also need the appropriate statement to allow the ASDM management
http inside
I think you needed to use the "inside" at the end. Can't remember. Try "outside" if that doesnt work.
Naturally if you have any kind of VPN Filter ACLs or if you are preventing the default operation of VPN traffic bypassing external interface ACL then you will also have to allow the traffic.
i have tested it on remoteaccess vpn and it is working fine. now only on site to site vpn i need to check.
suhas
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
