Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Question on csc-ssm and aip-ssm modules in the ASA5500

Is it true that both the csc-ssm and aip-ssm modules can't co-exist in the ASA5500 device at the same time??

One more question is there are sample config/example on the cisco site using the intra-interface keyword command involving NON IPSEC TRAFFIC

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: Question on csc-ssm and aip-ssm modules in the ASA5500

It is true that both the csc-ssm and aip-ssm modules can't co-exist in the ASA5500 device at the same time.

There isn't a sample configuration availavle onsite yet. However, apart from the same-security command, you would need the regular translation rule to pass the traffic. Also, due to the stateful nature, it only allows unidirectional traffic. Eg:

nat (inside) 10 192.168.1.0 255.255.255.0

global (inside) 10 interface

global (ouotside) 10 interface(not required though)

Sincerely,

~AJ

2 REPLIES
New Member

Re: Question on csc-ssm and aip-ssm modules in the ASA5500

It is true that both the csc-ssm and aip-ssm modules can't co-exist in the ASA5500 device at the same time.

There isn't a sample configuration availavle onsite yet. However, apart from the same-security command, you would need the regular translation rule to pass the traffic. Also, due to the stateful nature, it only allows unidirectional traffic. Eg:

nat (inside) 10 192.168.1.0 255.255.255.0

global (inside) 10 interface

global (ouotside) 10 interface(not required though)

Sincerely,

~AJ

New Member

Re: Question on csc-ssm and aip-ssm modules in the ASA5500

AJ

Thanks alot

159
Views
0
Helpful
2
Replies
CreatePlease login to create content