Cisco Systems ASASSMCSC10K9 инструкция обслуживания

Q UICK S TART G UIDE Cisco ASA Services Module 1 Information About the ASA Servi ces M odule in the Switch Network 2 Verifying the Module Installation 3 Assigning VLANs to the ASA Services Module 4 Using the MSFC as a Directly-Connected Rou ter 5 Logging Into the ASA Services Module 6 Configuring ASDM Connectivity 7 Launching ASDM 8 Running the Sta[...]

2 Updated: May 15, 2013, 78-19998-02 1 Information About the ASA Services Module in the Switch Network For switch and software compatibility with the ASA Services M odule (ASASM), see the following: http://www.cisco.com/en/US/docs/securi ty/asa/compatibility/asamatrx.html . Th e switch runs Cisco IOS software on both the swit ch supervisor engine a[...]

3 For multiple context mode, if you place the MSFC or router behind the ASASM, you should only connect it to a single context. If you connect it to multiple con texts, the MSFC/router will route between the contexts, which might not be your intentio n. The typical scenario for multiple contexts is to use a router in front of all the contexts to r o[...]

4 2 Verifying the Module Installation Verify that the switch acknowledge s the ASASM and has bro ught it onli ne. (If you n eed to install your ASASM, see the module installation guide on Cisco. com.) Ent er the following command to ensure that the Status column shows “Ok” for the ASASM: show module [ switch { 1 | 2 }] [ mod-num | all ] For a s[...]

5 4 Using the MSFC as a Directly-Connected Router If you want to use the MSFC as a directly -connected router (for ex ample, as the default gateway connected to the ASASM outside interface), then add an ASASM VLAN interface to the MSFC as a switched virtual interface (SVI). By default, you ca n add only one SVI; to add multiple S VIs, and understan[...]

6 5 Logging Into the ASA Services Module From the switch CLI, you can connect to a virtual console session on the A SASM: Command Purpose Step 1 service-module session [ switch { 1 | 2 }] slot number Example: Router# service-module session slot 4 hostname> Connects to the ASASM. For a switch in a VSS, enter the switch argument. You access user E[...]

7 Logging Out of the ASA Services Module If you do not log ou t of the ASASM, the console conn ection persists; there is no timeout. To end t he ASASM console session and access the switc h CLI, perform the follow ing steps. To kill another user’s active connecti on, which may have been unintentionally l eft open, see the configuration guide. Ste[...]

8 Step 2 Do one of the following to configure a manag ement interface, depending on you r mode: Routed mode: interface vlan number ip address ip_address [ mask ] nameif name security-level level Example: hostname(config)# interface vlan 1 hostname(config-if)# ip address 192.168.1.1 255.255.255.0 hostname(config-if)# nameif inside hostname(config-if[...]

9 Step 4 http server enable Example: hostname(config)# http server enable Enables the HTTP server for ASDM. Step 5 http ip_address mask interface_name Example: hostname(config)# http 192.168.1.0 255.255.255.0 inside Allows the management host to access ASDM. Step 6 write memory Example: hostname(config)# write memory Saves the configuration. Step 7[...]

10 7 Launching ASDM Using ASDM, you can use wizards to configure basic and advanced features. ASDM is a graphical user interface that allows you to manage the A SAS M from any lo cation by using a web browser. See the ASDM release notes on Cisco.co m for the requirements to run ASDM. Step 1 On the PC connected to the ASASM ma nagement VLAN, launch [...]

11 8 Running the Startup Wizard Run the Startup Wizard so that you can customize the security policy to suit your deployment. Using the startup wizard, you can set the following: Step 1 If the wizard is not already running, in the main ASDM window, choose Wizards > Sta rtup Wizard . Step 2 Follow the instructions in the S tartup Wizard to config[...]

12 9 (Optional) Allowing Access to Public Servers Behind the ASA Services Module The Public Server pane automatically configures the security policy to make an inside server accessible from the Internet. As a business owner, you might have internal network services, such as a web and FTP server, that need to be available to an outside user. You can[...]

13 10 (Optional) Running Other Wizards in ASDM You can optionally run the following additional wizards in ASDM: • High Availability and Scalability Wizard Configure active/active or active/standby failover, or VPN cluster loa d balancing. • Packet Capture Wizard Configure and run packet capture. The wizard will r un one packet capture on each o[...]

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco .com/go/trademarks . Third-party trad emarks mentio ned are the p roperty of t heir respecti ve owners. The use of th e word partn er does not i mply a partner[...]