Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual

Page: 116 / 2164

1-8
Cisco ASA Series CLI Configuration Guide
Chapter 1 Getting Started
Configuring ASDM Access for Appliances
Routed mode:
interface vlan number
ip address ip_address [ mask ]
nameif name
security-level level
Example:
hostname(config)# interface vlan 1
hostname(config-if)# ip address
192.168.1.1 255.255.255.0
hostname(config-if)# nameif inside
hostname(config-if)# security-level 100
Configures an interface in routed mode. The security-level is a
number between 1 and 100, where 100 is the most secure.
Transparent mode:
interface bvi number
ip address ip_address [ mask ]
interface vlan number
bridge-group bvi_number
nameif name
security-level level
Example:
hostname(config)# interface bvi 1
hostname(config-if)# ip address
192.168.1.1 255.255.255.0
hostname(config)# interface vlan 1
hostname(config-if)# bridge-group 1
hostname(config-if)# nameif inside
hostname(config-if)# security-level 100
Configures a bridge virtual interface and assigns a management
VLAN to the bridge group. The
security-level is a number
between 1 and 100, where 100 is the most secure.
Step 3
interface ethernet 0/ n
switchport access vlan number
no shutdown
Example:
hostname(config)# interface ethernet 0/1
hostname(config-if)# switchport access
vlan 1
hostname(config-if)# no shutdown
Enables the management switchport and assigns it to the
management VLAN.
Step 4
dhcpd address ip_address - ip_address
interface_name
dhcpd enable interface_name
Example:
hostname(config)# dhcpd address
192.168.1.5-192.168.1.254 inside
hostname(config)# dhcpd enable inside
Enables DHCP for the management host on the management
interface network. Make sure you do not include the management
address in the range.
Note
By default, the IPS module, if installed, uses 192.168.1.2
for its internal management address, so be sure not to use
this address in the DHCP range. You can later change the
IPS module management address using the ASA if
required.
Step 5
http server enable
Example:
hostname(config)# http server enable
Enables the HTTP server for ASDM.
Command Purpose