Cisco ASA management from remote sites

[diwakar410]

I have cisco ASA 5515 and i have configured the ASA using ASDM. Now what i want is, i want to configure the ASA from my home  as well so i can manage my free time. I can't remotely get into the ASA from my public IP so what option do i have? I have only configured ASA from the management interface. Is is possible to configure ASA from other interface like gi0/1, 0/2 or so on using the LAN interface?

[Aditya Ganjoo]

Hi Diwakar,

What sort of access do you need ?

From Internet you would be only limited to access ASA via SSH and ASDM.

So you just need to make sure you allow your public IP for either SSH/ASDM.

Regards,

Aditya

Please rate helpful posts.

[diwakar410]

Hello Aditya,

SSH and ASDM both would be fine. How do i do that ? Can you please tell me the commands to do so?

[Aditya Ganjoo · Accepted solution]

Hi Diwakar,

You can check this doc:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/access_management.html

For ASDM just add your IP like this:

http source_IP_address mask source_interface

http x.x.x.x 255.255.255.255 outside

For SSH you also need to do the same thing:

ssh source_IP_address mask source_interface

ssh x.x.x.x 255.255.255.255 outside

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[diwakar410]

Hi Aditya,

Thank you for your prompt response. From my understanding, 

"http 1.2.3.4 255.255.255.255 outside" is the command to get access of ASDM, where 1.2.3.4 is my public IP address. 

So i am going to the browser from my romote office and i type 1.2.3.4 and i get the access of ASA, am i right? Thanks in advance.

[Aditya Ganjoo]

Hi,

Yes you are correct.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[diwakar410]

Hi Aditya, 

Thank you for your help. I have other issues as well. Can i ask it here or do i have to open a new discussion?

[Aditya Ganjoo]

Hi Diwakar,

I would request you to open a new discussion as per the process.

I would be glad to assist you.

Regards,

Aditya

[Aditya Ganjoo]

Hi,

You do not need to put 1.2.3.4 in the browser, you will use the outside interface IP of the ASA.

So if the ASA's outside IP is 1.1.1.1 you need to put this IP in browser:

https://1.1.1.1/admin

Regards,

Aditya

Please rate helpful posts and mark correct answers.