Updated: May 15, 2013, 78-19998-02
1Information About the ASA Services Module in the Switch Network
For switch and software compatibility with the ASA Services Module (ASASM), see the following: http://www.cisco.com/en/US/docs/security/asa/compatibility/asamatrx.html. The switch runs Cisco IOS software on both the switch supervisor engine and the integrated Multilayer Switch Feature Card (MSFC). The ASASM runs its own operating system.
Although you need the MSFC as part of your system, you do not have to use it. If you choose to do so, you can assign one or more VLAN interfaces to the MSFC (known as switched virtual interfaces (SVIs)). You can alternatively use an external router instead of the MSFC.
In single context mode, you can place the MSFC or router in front of the ASASM or behind the ASASM; location depends on the VLANs that you assign to the ASASM interfaces.
MSFC/Router Behind the ASASM | MSFC/Router In Front of the ASASM |
Internet | Internet |
Router |
|
VLAN 200 | VLAN 100 |
| MSFC/Router |
ASASM |
|
| VLAN 200 |
VLAN 201
MSFC/Router
VLAN 301 | VLAN 303 | VLAN 201 |
Inside | HR | Inside |
| VLAN 302 |
|
| DMZ |
|
ASASM
VLAN 203
HR
VLAN 202
DMZ
2