2
Updated: May 15, 2013, 78-19998-02
1 Information About the ASA Services Module in the
Switch Network
For switch and software compatibility with the ASA Services Module (ASASM), see the following:
http://www.cisco.com/en/US/docs/security/asa/compatibility/asamatrx.html. The switch runs Cisco
IOS software on both the switch supervisor engine and the integrated Multilayer Switch Feature Card
(MSFC). The ASASM runs its own operating system.
Although you need the MSFC as part of your system, you do not have to use it. If you choose to do
so, you can assign one or more VLAN interfaces to the MSFC (known as switched virtual interfaces
(SVIs)). You can alternatively use an external router instead of the MSFC.
In single context mode, you can place the MSFC or router in front of the ASASM or behind the
ASASM; location depends on the VLANs that you assign to the ASASM interfaces.
ASASM
ASASM
MSFC/Router Behind the ASASM MSFC/Router In Front of the ASASM
MSFC/Router
Router
VLAN 200
VLAN 201
VLAN 302
VLAN 303VLAN 301
DMZ
Inside HR
MSFC/Router
VLAN 200
VLAN 100
VLAN 201
VLAN 202
VLAN 203
DMZ
Inside HR
Internet
Internet