Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA5520 - management interface

I have a problem to configure management interface.

What I did is:

route outside-admin 0.0.0.0 0.0.0.0 10.1.1.1 1

route management myserver 255.255.255.255 10.1.83.1 1

I expected it should allowed me to access thought myserver by management and the rest machine in subnet 10.1.83.0/24 should go by default.

However, all PC in internal LAN can not get connection on subnet 10.1.83.0/24.

I tried to remove the route mnagement, but, I can not reach the ip anymore.

Can I make the management interface as a normal interface which allowed me to access, but not a route interface, as CSS do?

Any comments will be appreciated

Thanks in advance

3 REPLIES
Bronze

Re: ASA5520 - management interface

Hello,

Trying to understand what you want to do here. You want to route a single IP address through your management interface -

1) make sure that under the interface configuration for managment you do a 'no management-only' so that the interface will route traffic

2) Now the second part is you want myserver to go out the management server to 10.1.83.1, which looks right.

3) The only question I have now is that it looks to me like the 10.1.83.x network is off the management interface - otherwise how could you route to .1? If you expect everything else to go out the default route you need to make sure the subnet mask for the management interface is correct.

--Jason

New Member

Re: ASA5520 - management interface

Thanks for reply.

What I want is to configure:

1. all ssh session to the box, managent traffic, such as asdm traffic, box's snmp traffic all go to management interface to myserver.

2. the rest traffic go to outside interface.

Obviously, I configure this wrongly. So the result becomes that the subnet which myserver is located, can not be see by internal LAN.

How can I correct it?

Pls advice, Many thanks.

Cisco Employee

Re: ASA5520 - management interface

Hi,

The management interface is meant only for management traffic, it can not pass through traffic.

If you want to pass through traffic on the managment interface, you have to issue :

no managment-only

in the interface mode.

Hope this helps.

-Kanishka

1818
Views
0
Helpful
3
Replies
CreatePlease login to create content