Cisco ASA 5506-X Configuration Manual page 379

Chapter 17 ASA CX Module
Connect the ASA CX Management Interface
In addition to providing management access to the ASA CX module, the ASA CX management interface
needs access to an HTTP proxy server or a DNS server and the Internet for signature updates and more.
This section describes recommended network configurations. Your network may differ.
ASA 5585-X (Hardware Module)
The ASA CX module includes a separate management and console interface from the ASA. For initial
setup, you can connect with SSH to the ASA CX Management 1/0 interface using the default IP address
(192.168.8.8/24). If you cannot use the default IP address, you can either use the console port or use
ASDM to change the management IP address so you can use SSH.
ASA 5585-X
SSP
If you have an inside router
If you have an inside router, you can route between the management network, which can include both
the ASA Management 0/0 and ASA CX Management 1/0 interfaces, and the ASA inside network for
Internet access. Be sure to also add a route on the ASA to reach the Management network through the
inside router.
ASA CX Default
ASA CX SSP
SFP1 SFP0 7 6 5 4 3
SFP1 SFP0 7 6 5 4 3
Proxy or DNS Server (for example)
ASA gateway for Management
Router
Gateway
Management
Management PC
ASA CX Management 1/0
Default IP: 192.168.8.8
0
1
2 1 0 1 MGMT 0 USB
0
1
2 1 0 1 MGMT 0
USB
ASA Management 0/0
Default IP: 192.168.1.1
ASA
Inside
CX
ASA Management 0/0
ASA CX Management 1/0
Cisco ASA Series Firewall CLI Configuration Guide
Configure the ASA CX Module
RESET
AUX CONSOLE
RESET
AUX CONSOLE
Outside
Internet
17-9