Cisco ASA ASDM Management (Loopback)
We have firepower 1010 running ASA image 9.18(4)68. We have a need for management access using ASDM to a unique IP that can't have on a physical or SVI interface (dont ask its a long story). We came up with using a loopback with a nameif interface.
Below is a snapshot of the configuration
interface Loopback1
nameif asdmmgmt
ip address 172.30.255.1 255.255.255.255
interface Vlan10
description LAN
nameif inside
security-level 100
ip address 10.10.10.1 255.255.255.240
management-access inside
http 0.0.0.0 0.0.0.0 inside
http server enable 4443
Couple of items to point out, we can ping the 172.30.255.1 IP no issue. However when launching ASDM to IP 172.30.255.1:4443 it times out and we see error messages below.
Sep 01 2026 15:28:13: %ASA-2-106001: Inbound TCP connection denied from 192.168.10.10/61373 to 172.30.255.1/4443 flags SYN on interface inside
Sep 01 2026 15:28:16: %ASA-2-106001: Inbound TCP connection denied from 192.168.10.10/61373 to 172.30.255.1/4443 flags SYN on interface inside
We also do not have the option of specifying HTTP access to the nameif interface asdmmgmt for some reason.
fpr-76257072(config)# http 0 0 ?
configure mode commands/options:
Current available interface(s):
inside Name of interface Vlan10
outside Name of interface Ethernet1/1
Anyone ever try this ?
3
u/lokknoh 11h ago
Im updating my own post :D Turns out I need to be on 9.22 to support HTTP access to that interface. Only SSH and Telnet are supported.