Cisco Cisco ASA 5585-X with FirePOWER SSP-20 安装指南
Cisco ASA 5585-X Quick Start Guide
4. Connect Interface Cables and Verify Connectivity
3
All management traffic to and from the non-ASA SSP must enter and exit the Management 1/0 or 1/1 interface.
Because this interface is not an ASA data interface, traffic cannot pass through the ASA over the backplane; you
need to physically cable the management interface to an ASA interface. Non-ASA SSPs usually need Internet
access for updates. See the following typical cabling setup to allow SSP access to the Internet through the ASA
management interface. Other options are possible, depending on how you want to connect your network; for
example, you can make the Management 1/0 interface outside facing; or you can route between it and a different
ASA interface if you have an inside router; and so on.
Because this interface is not an ASA data interface, traffic cannot pass through the ASA over the backplane; you
need to physically cable the management interface to an ASA interface. Non-ASA SSPs usually need Internet
access for updates. See the following typical cabling setup to allow SSP access to the Internet through the ASA
management interface. Other options are possible, depending on how you want to connect your network; for
example, you can make the Management 1/0 interface outside facing; or you can route between it and a different
ASA interface if you have an inside router; and so on.
4. Connect Interface Cables and Verify Connectivity
1.
Cable the management and data interfaces. See
for a
sample cabling scenario.
Slot 0 Module
Management
Interface ID
Interface ID
Default IP
address
address
Slot 1 Module
Management
Interface ID
Interface ID
Default IP
address
address
ASA SSP
The ASA SSP is
the only
supported
module in slot 0.
the only
supported
module in slot 0.
Management 0/0
192.168.1.1
ASA SSP
Management 0/0
192.168.1.1
If you want to put
both ASA SSPs
on the same
network, you
must change
from this default.
both ASA SSPs
on the same
network, you
must change
from this default.
All other SSPs
Management 1/0
Varies. See the
module quick start
guide for exact
values.
module quick start
guide for exact
values.
ASA Management 0/0
Module Management 1/0
Set IP to be on same network as M0/0
Management PC
Layer 2
Switch
ASA
management
outside
Module
Internet
Module Gateway
to Internet