Cisco ASA 5506-X Configuration Manual page 349

Chapter 16 ASA FirePOWER (SFR) Module
ASA FirePOWER
Default Gateway
If you do not have an inside router
If you have only one inside network, then you cannot also have a separate management network, which
would require an inside router to route between the networks. In this case, you can manage the ASA from
the inside interface instead of the Management 0/0 interface. Because the ASA FirePOWER module is
a separate device from the ASA, you can configure the ASA FirePOWER Management 1/0 address to
be on the same network as the inside interface.
Management PC
Proxy or DNS Server
ASA 5506-X and 5512-X through ASA 5555-X (Software Module)
These models run the ASA FirePOWER module as a software module, and the ASA FirePOWER
management interface shares the Management 0/0 interface with the ASA (Management 1/1 on
5506-X)
cannot use the default IP address, you can either session to the ASA FirePOWER over the backplane or
use ASDM to change the management IP address so you can use SSH.
ASA 5545-X
ASA gateway for Management
Router
Management
Management PC
ASA FirePOWER Default Gateway
Layer 2
Switch
ASA FirePOWER Management 1/0
ASA Management 0/0 not used
(for example)
. For initial setup, you can connect with SSH to the ASA FirePOWER default IP address. If you
ASA FirePOWER Management 0/0
ASA Management 0/0
Default IP: 192.168.1.1
Proxy or DNS Server (for example)
Inside
ASA Management 0/0
ASA FirePOWER Management 1/0
ASA
Outside
Inside
FP
Cisco ASA Series Firewall CLI Configuration Guide
Configure the ASA FirePOWER Module
ASA
Outside
Internet
FP
Internet
16-9