Cisco ASA 5506-X Configuration Manual page 381

Chapter 17 ASA CX Module
If you have an inside router
If you have an inside router, you can route between the Management 0/0 network, which includes both
the ASA and ASA CX management IP addresses, and the inside network for Internet access. Be sure to
also add a route on the ASA to reach the Management network through the inside router.
ASA CX Default
If you do not have an inside router
If you have only one inside network, then you cannot also have a separate management network. In this
case, you can manage the ASA from the inside interface instead of the Management 0/0 interface. If you
remove the ASA-configured name from the Management 0/0 interface, you can still configure the ASA
CX IP address for that interface. Because the ASA CX module is essentially a separate device from the
ASA, you can configure the ASA CX management address to be on the same network as the inside
interface.
Management PC
Proxy or DNS Server
(for example)
You must remove the ASA-configured name for Management 0/0; if it is configured on the ASA, then
Note
the ASA CX address must be on the same network as the ASA, and that excludes any networks already
configured on other ASA interfaces. If the name is not configured, then the ASA CX address can be on
any network, for example, the ASA inside network.
(ASA 5512-X through ASA 5555-X) Install or Reimage the Software Module
If you purchase the ASA with the ASA CX module, the module software and required solid state drives
(SSDs) come pre-installed and ready to go. If you want to add the ASA CX to an existing ASA, or need
to replace the SSD, you need to install the ASA CX boot software and partition the SSD according to
this procedure. To physically install the SSD, see the ASA hardware guide.
Proxy or DNS Server (for example)
ASA gateway for Management
Router
Gateway
Management
Management PC
ASA CX Default Gateway
Layer 2
Switch
Management 0/0
(ASA CX only)
ASA
Outside
Inside
CX
Management 0/0
ASA
Inside Outside
CX
Cisco ASA Series Firewall CLI Configuration Guide
Configure the ASA CX Module
Internet
Internet
17-11