Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

AIP SSM-10

Hi EXP.

  1st time for me to work with AIP SSM-10, i have ASA5510  and  AIP SSM-10 ,

firewall (5510):

inside 192.168.55.252

outside 87.191.101.1

DMZ 172.16.0.1

when plug the AIP SSM-10 what ip address i should give it and how can i be abile to make sure it is haveing ip connectivity like ping or traceroute . the point i am missing it is the ip address .

i gave an ip to the managment interface and i allowed ping but i couldn`t ping the AIP SSM-10  from  the firewall .

please Assist,

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: AIP SSM-10

1) From ASA, you would session into the module, and you would need to configure the ip address on that module using the "setup" command.

2) That ip address that you have just configured is the one assigned to the interface on that module.

3) That interface on the module needs to be physically connected to your network. You can configure a unique ip address in the same subnet as your ASA inside interface.

Here is a hardware diagram of the module with the port/interface:

http://www.cisco.com/en/US/docs/security/ips/7.0/installation/guide/hw_installing_ssm.html

Here is how to run the "setup" command:

http://www.cisco.com/en/US/docs/security/ips/7.0/installation/guide/hw_initializing.html

4 REPLIES
Cisco Employee

Re: AIP SSM-10

To be able to manage the AIP module, you would need to connect the port on the module to your network that is reachable.

If you haven't configured the AIP module management ip address, you can session into the module from the ASA, and run the "setup" command.

Community Member

Re: AIP SSM-10

Hi ,

   i did session from the ASA , but in order to reach the IPS  and using the device manager software or https access in this case do i have to assign reachable ip to the managment interface or i can assign it anywhere else , and can i ping this ip from the ASA

this is my problem i never use the managment interface in routers , switches or firewalls

THNX

Cisco Employee

Re: AIP SSM-10

1) From ASA, you would session into the module, and you would need to configure the ip address on that module using the "setup" command.

2) That ip address that you have just configured is the one assigned to the interface on that module.

3) That interface on the module needs to be physically connected to your network. You can configure a unique ip address in the same subnet as your ASA inside interface.

Here is a hardware diagram of the module with the port/interface:

http://www.cisco.com/en/US/docs/security/ips/7.0/installation/guide/hw_installing_ssm.html

Here is how to run the "setup" command:

http://www.cisco.com/en/US/docs/security/ips/7.0/installation/guide/hw_initializing.html

Community Member

Re: AIP SSM-10

Thanks

963
Views
0
Helpful
4
Replies
CreatePlease to create content