Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
  • Interface 1 connects to WAN
  • Interface 2 connects to PROXY
  • PROXY has an ip of 192.168.1.2

How to I tell the ASA 5505 to only allow connections from 192.168.1.2 through interface 2? I can use ADSM or Console command line..

share|improve this question

2 Answers 2

up vote 1 down vote accepted

Assuming inside and outside interface labeling... Management access can be limited via:

For ASDM access: http 192.168.1.2 255.255.255.255 inside

For telnet access: telnet 192.168.1.2 255.255.255.255 inside

For general network traffic, you'd establish an access rule... Inbound-to-outbound.

Something like: access-list inside_access_in extended permit ip 192.168.1.2 255.255.255.255 any

share|improve this answer

Assuming you've named the internal interface inside, here's what it would look like:

access-list inside_access_in extended permit ip host 192.168.1.2 any
access-group inside_access_in in interface inside

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.