ASA 5520 with SSM

Unanswered Question
May 6th, 2008
User Badges:

Hi all,


I have ASA 5520 with CSC-SSM modul. And, i am intrested in, What IP address and Gateway have i to assign to SSM module. I know, IP which will be assign SSM module have to reach internet for Trend Micro for updates. I just need to assign inside interface any IP address and gateway ??? Need UR advice :)))


tnx in advance

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
tj.mitchell Wed, 05/07/2008 - 08:16
User Badges:
  • Bronze, 100 points or more

Typically, this IP Address is on the internal network and used for management. I usually give it an address from a management network with associated gateway to allow for access to the internet.



batumibatumi Wed, 05/07/2008 - 22:52
User Badges:

Great tnx mitchell , U R only person who respond me :)))


mitchell, to ask U more detail: i gave SSM modul IP address from managment network, but gateway must be outside or inside intrface IP ... ? for example, IP address - 192.168.1.100, Gateway Inside interface IP 10.x.x.x or Outside interface IP 77.x.x.x


Sorry for my poor English. I hope U understand what i said :))) tnx, in advance :)))

batumibatumi Wed, 05/07/2008 - 23:36
User Badges:

tnx, but what will happen if i'll assign IP address of inside interface, which could be reach to internet... ??? :)))


Its very kind from UR side to help me to findout unknow things for me.

leo_zidane Thu, 05/08/2008 - 04:23
User Badges:

inside interface should be used to go into your internal network.


If you say internet to be inside, the routing is like looping around.

batumibatumi Thu, 05/08/2008 - 06:06
User Badges:

But, i'm going to use inside network users to have access to internet (using PAT) ... my question: if i'll assgn IP address SSM modul 10.0.0.100 and its gateway will be Outside interface IP ... is it OK ???


tnx, in advance :)))

tj.mitchell Thu, 05/08/2008 - 09:54
User Badges:
  • Bronze, 100 points or more

Give it an internal IP Address and gateway for your network. So long as this network has access to the internet you'll be fine.


Example:

IP Address 10.0.0.100 /24

Gateway 10.0.0.1




Actions

This Discussion