Cisco ASA 5506-X Quick Start Manual page 3

Cisco ASA 5506-X Series Quick Start Guide
Management PC
Note: You must use a separate inside switch in your deployment.
The default configuration enables the above network deployment with the following behavior.

inside --> outside traffic flow

outside IP address from DHCP

(ASA 5506W-X) wifi <--> inside, wifi --> outside traffic flow

DHCP for clients on inside and wifi. The access point itself and all its clients use the ASA as the DHCP server.

Management 1/1 belongs to the ASA Firepower module. The interface is Up, but otherwise unconfigured on
the ASA. The ASA Firepower module can then use this interface to access the ASA inside network and use
the inside interface as the gateway to the Internet.
Note: Do not configure an IP address for this interface in the ASA configuration. Only configure an IP address
in the Firepower configuration. You should consider this interface as completely separate from the ASA in
terms of routing.

ASDM access on the inside interface and the wifi interface
Note: If you want to deploy a separate router on the inside network, then you can route between management and
inside. In this case, you can manage both the ASA and ASA FirePOWER module on Management 1/1 with the
appropriate configuration changes.
ASA FirePOWER Default Gateway
Layer 2
Switch
GigabitEthernet 1/2
192.168.1.1
Management 1/1
No ASA IP address
FirePOWER IP address: 192.168.1.2
ASA
inside outside
GigabitEthernet 1/1
FP AP
wifi
GigabitEthernet 1/9 (internal)
192.168.10.1
Access Point IP address (DHCP): 192.168.10.2
3
3. Deploy the ASA 5506-X in Your Network
Internet