AIP-SSM10 Management

Unanswered Question
Nov 19th, 2007

HI,

I have an ASA 5520 with AIP-SSM10, I have configure AIP module with setup, but I dont have access through the ASDM to IPS, I only have access through cli session 1 comand.

How can I acces the module through the ASDM.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
rhermes Mon, 11/19/2007 - 12:07

Cesar -

You can't manage the SSM modules via the ASDM.

The SSM-10 modules are a stand alone IPS device and have their own GUI called IDSM. Give the module a physical network connection (the jack on the card is for management), fire up your web browser and point it at the management IP address you configured on the SSM when you ran "setup".

Cesar_Cepeda Mon, 11/19/2007 - 14:47

OK, I have tried to connect the AIP-SSM10 configuration interface through the management port but I cant. I can ping from the module to the PC but from PC to the module cant connect.

Some suggestion.

rhermes Tue, 11/20/2007 - 09:30

Get on the sensor console of the SSM-10 and add the IP address of your PC into the "allowed hosts" on the SSM-10.

Running "setup" might be the easy way to do this.

Cesar_Cepeda Wed, 11/21/2007 - 06:10

Thanks that had done, but now I have a question about how should be the ips address of ASA and the AIP-SSM10.

I have configured the IP of AIP-SSM10 whit an IP in same network that inside conect those two ports to a switch, in that switch I connected my PC in the inside network and can management the AIP-SSM10 from ASDM, this config is correct???? or what should be the ip address schemme

rhermes Fri, 11/23/2007 - 08:17

It sounds like you have the AIP-SSM connected and addressed properly. I would make your command and control network at least a /29 so that you have enough IP addresses for your AIP-SSM, the ASA and your PC.

If you have everything set up properly, you should be able to ping and https: to your AIP-SSM

acomiskey Tue, 11/27/2007 - 13:57

That is not true. You CAN manage the ssm module through the ASDM.

jim.sellers Wed, 11/28/2007 - 08:27

You are correct. IDM, CLI, or ASDM can all be used to manage the AIP-SSM.

jim.sellers Wed, 11/28/2007 - 08:28

one thing to make sure you do is set the IPS ACL or you wont be able to connect to it.

Actions

This Discussion