Cisco ASA 5506-X Configuration Manual page 380

Configure the ASA CX Module
If you do not have an inside router
If you have only one inside network, then you cannot also have a separate management network, which
would require an inside router to route between the networks. In this case, you can manage the ASA from
the inside interface instead of the Management 0/0 interface. Because the ASA CX module is a separate
device from the ASA, you can configure the ASA CX Management 1/0 address to be on the same
network as the inside interface.
Management PC
Proxy or DNS Server
ASA 5512-X through ASA 5555-X (Software Module)
These models run the ASA CX module as a software module, and the ASA CX management interface
shares the Management 0/0 interface with the ASA. For initial setup, you can connect with SSH to the
ASA CX default IP address (192.168.1.2/24). If you cannot use the default IP address, you can either
session to the ASA CX over the backplane or use ASDM to change the management IP address so you
can use SSH.
ASA 5545-X
Cisco ASA Series Firewall CLI Configuration Guide
17-10
ASA CX Default Gateway
Layer 2
Switch
ASA CX Management 1/0
ASA Management 0/0 not used
(for example)
ASA CX Management 0/0
Default IP: 192.168.1.2
ASA Management 0/0
Default IP: 192.168.1.1
ASA
Inside Outside
Internet
CX
Chapter 17 ASA CX Module