RE: asa remote management

If you allow ASDM to install, the connection manager should let you point to
the inside interface. 192.168.1.1 should be the correct address for the java
start.

-ryan

From: Tony Singh [mailto:mothafungla_at_gmail.com]
Sent: Tuesday, July 24, 2012 9:58 AM
To: Ryan West; Cisco certification
Subject: Re: asa remote management

ok bingo ssh now working - suppose the logic was inside interface duh

https problem for asdm - gives me the page where it thinks I need to install
the launcher again and also java.

i had this before on my local network

fixed with https://-ip-address-or-name-/admin/public/asdm.jnlp

it's a java asdm calling problem i think..

however not working this time around over vpn, my launcher tried calling for
it on 192.168.1.1 which is the management address

On 24 July 2012 14:24, Ryan West <rwest_at_zyedge.com<mailto:rwest_at_zyedge.com>>
wrote:
Ssh 192.168.2.0 255.255.255.0 inside. Do the same for http. Connect to the
inside address of the asa.

Sent from handheld

On Jul 24, 2012, at 9:20 AM, "Tony Singh"
<mothafungla_at_gmail.com<mailto:mothafungla_at_gmail.com>> wrote:

> can't get this to work, no ssh or asdm
>
> im vpn'd in and can contact my inside network ok
>
> vpn pool 192.168.2.0
> inside network 192.168.1.0
>
> ciscoasa# sh run | i http
> http server enable
> http server idle-timeout 1440
> http 192.168.1.0 255.255.255.0 inside
> http 0.0.0.0 0.0.0.0 outside
>
> ciscoasa# sh run | i ssh
> aaa authentication ssh console LOCAL
> ssh 192.168.1.0 255.255.255.0 inside
> ssh 0.0.0.0 0.0.0.0 outside
> ssh timeout 60
> ssh version 2
>
> ciscoasa# sh run | i management
> management-access inside
>
> any pointers...
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Jul 24 2012 - 14:01:03 ART