Can anyone help? I am unable to access the management interface of my ASA unless I am in the same subnet. There does not seem to be any way to give it a gateway address. So I have to manage the ASA inband via the inside interface.
Perhaps I am misunderstanding your question, but what you are experiencing is expected.
If you are attempting to manage the ASA from a host in your inside subnet, you must connect to the inside interface. The firewall does not support connecting across the firewall to a far-side interface.
I have previously tried adding a management interface route for my host to the ASA. Even though the management interface is not supposed to allow through traffic the ASA then tried to route all traffic for my host via the management interface.
I can't be the only person with an ASA that has a production traffic network as well as a management network. My host resides on the production network. The management interface of the ASA is assigned to the management network. When I try to telnet/ssh to the management interface of the ASA - nothing. It doesn't work. Thanks for any help.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...