You should name the interface to management and give it a security level to 
allow the ASA to enable the ip-address.

ASA will not load an ip-address until a name and security level is given to the 
interface. Then the keyword management-only is used to define that it's only 
for management..

Kind regards
Pieter-Jan

On 16 jun 2011, at 23:34, Mark Senteza wrote:

> Are you able to ping the Management0/0 ip from another device on the same 
> subnet ?
> 
> On Wed, Jun 15, 2011 at 12:56 AM, Kok Yong CHEONG <[email protected]> wrote:
> hi guys
> 
> need to clear a doubt that is very basic, sorry about that.
> 
> for ASA's management interface, and to be used for "management-only", does it 
> require nameif and security-level information ? my view is that if you are 
> using for "management-only", you should not need nameif and security-level 
> configured, however, when i configure the following, the ASA does not seems 
> to be able to ping this management ip itself, is it expected ?  thanks in 
> advance
> 
> interface Management0/0
>  no nameif
>  no security-level
>  ip address 10.100.100.10 255.255.255.0 
>  management-only
> 
> (and no ip address being shown on Management 0/0 shown in the following show 
> command)
>  
> ciscoasa# sh int ip brief
> Interface                  IP-Address      OK? Method Status                
> Protocol
> GigabitEthernet0/0         192.1.22.10     YES manual up                    
> up  
> GigabitEthernet0/1         10.22.22.10     YES manual up                    
> up  
> GigabitEthernet0/2         192.168.3.10    YES manual up                    
> up  
> GigabitEthernet0/3         192.168.4.10    YES manual up                    
> up  
> Internal-Control0/0        127.0.1.1       YES unset  up                    
> up  
> Internal-Data0/0           unassigned      YES unset  up                    
> up  
> Management0/0              unassigned      YES manual up                    
> up  
> 
> Regards
> KY
> 
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please 
> visit www.ipexpert.com
> 
> Are you a CCNP or CCIE and looking for a job? Check out 
> www.PlatinumPlacement.com
> 
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please 
> visit www.ipexpert.com
> 
> Are you a CCNP or CCIE and looking for a job? Check out 
> www.PlatinumPlacement.com

---
Nefkens Advies
Enk 26
4214 DD Vuren
The Netherlands

Tel: +31 88 633 5300
Fax: +31 88 633 5399
Direct: +31 88 633 5304
Email: [email protected]
Web: http://www.nefkensadvies.nl/





_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to