Question on csc-ssm and aip-ssm modules in the ASA5500

[harpritsingh]

Is it true that both the csc-ssm and aip-ssm modules can't co-exist in the ASA5500 device at the same time??

One more question is there are sample config/example on the cisco site using the intra-interface keyword command involving NON IPSEC TRAFFIC

[ankurjai · Accepted solution]

It is true that both the csc-ssm and aip-ssm modules can't co-exist in the ASA5500 device at the same time.

There isn't a sample configuration availavle onsite yet. However, apart from the same-security command, you would need the regular translation rule to pass the traffic. Also, due to the stateful nature, it only allows unidirectional traffic. Eg:

nat (inside) 10 192.168.1.0 255.255.255.0

global (inside) 10 interface

global (ouotside) 10 interface(not required though)

Sincerely,

~AJ

[harpritsingh]

AJ

Thanks alot