public ip to aip_ssm

[gaurang_pandya]

Hi, how do I assign public ip address that is not assigned to firewall to an AIP SSM, what is best way of accessing AIP-SSM web interface over internet??

I mean currently there is some 10.x.x.x ip address is assigned to AIP-SSM if and that ip address is no where in my network. I can assign a private ip and then statically nat in firewall in that case behind which interface of firewall will it be, for me to give static command and in which interface series ip address I should assign to aip ssm.

Hope I am not confusing much...

[Farrukh Haroon]

I don't think you will be able to do this NAT on the ASA itself. You can either directly assign the PUBLIC IP to the AIP-SSM's command and control interface or use some other device (for example a router in front of the ASA) to do static on to one nat. The connection between the ASA and this module is not at layer 3.

ip nat inside source static 10.x.x.x pubic-ip

Regards

Farrukh