AIP SSM-10

[mohammedhabib]

Hi EXP.

  1st time for me to work with AIP SSM-10, i have ASA5510  and  AIP SSM-10 ,

firewall (5510):

inside 192.168.55.252

outside 87.191.101.1

DMZ 172.16.0.1

when plug the AIP SSM-10 what ip address i should give it and how can i be abile to make sure it is haveing ip connectivity like ping or traceroute . the point i am missing it is the ip address .

i gave an ip to the managment interface and i allowed ping but i couldn`t ping the AIP SSM-10  from  the firewall .

please Assist,

[Jennifer Halim]

To be able to manage the AIP module, you would need to connect the port on the module to your network that is reachable.

If you haven't configured the AIP module management ip address, you can session into the module from the ASA, and run the "setup" command.

[mohammedhabib]

Hi ,

   i did session from the ASA , but in order to reach the IPS  and using the device manager software or https access in this case do i have to assign reachable ip to the managment interface or i can assign it anywhere else , and can i ping this ip from the ASA

this is my problem i never use the managment interface in routers , switches or firewalls

THNX

[Jennifer Halim · Accepted solution]

1) From ASA, you would session into the module, and you would need to configure the ip address on that module using the "setup" command.

2) That ip address that you have just configured is the one assigned to the interface on that module.

3) That interface on the module needs to be physically connected to your network. You can configure a unique ip address in the same subnet as your ASA inside interface.

Here is a hardware diagram of the module with the port/interface:

http://www.cisco.com/en/US/docs/security/ips/7.0/installation/guide/hw_installing_ssm.html

Here is how to run the "setup" command:

http://www.cisco.com/en/US/docs/security/ips/7.0/installation/guide/hw_initializing.html

[mohammedhabib]

Thanks