Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual

Page: 484 / 2164

1-8
Cisco ASA Series CLI Configuration Guide
Chapter 1 Completing Interface Configuration (Transparent Mode)
Completing Interface Configuration in Transparent Mode
Task Flow for Completing Interface Configuration
Step 1
Set up your interfaces depending on your model:
•
ASA 5510 and higher— Chapter 1, “Starting Interface Configuration (ASA 5510 and Higher).”
•
ASA 5505— Chapter 1, “Starting Interface Configuration (ASA 5505).”
•
ASASM— Chapter 1, “Configuring the Switch for Use with the ASA Services Module.”
Step 2
(Multiple context mode) Allocate interfaces to the context according to the “Configuring Multiple
Contexts” section on page 1-15 .
Step 3
(Multiple context mode) Enter the changeto context name command to change to the context you want
to configure.Configure one or more bridge groups, including the IPv4 address. See the “Configuring
Bridge Groups” section on page 1-8 .
Step 4
Configure general interface parameters, including the interface name and security level. See the
“Configuring General Interface Parameters” section on page 1-9 .
Step 5
(Optional; not supported for the ASA 5505) Configure a management interface. See the “Configuring a
Management Interface (ASA 5510 and Higher)” section on page 1-12 .
Step 6
(Optional) Configure the MAC address and the MTU. See the “Configuring the MAC Address and
MTU” section on page 1-13 .
Step 7
(Optional) Configure IPv6 addressing. See the “Configuring IPv6 Addressing” section on page 1-16 .
Step 8
(Optional) Allow same security level communication, either by allowing communication between two
interfaces or by allowing traffic to enter and exit the same interface. See the
“Allowing Same Security
Level Communication” section on page 1-18 .
Configuring Bridge Groups
Each bridge group requires a management IP address. The ASA uses this IP address as the source address
for packets originating from the bridge group. The management IP address must be on the same subnet
as the connected network. For IPv4 traffic, the management IP address is required to pass any traffic.
For IPv6 traffic, you must, at a minimum, configure the link-local addresses to pass traffic, but a global
management address is recommended for full functionality, including remote management and other
management operations.
Guidelines and Limitations
You can configure up to 8 bridge groups in single mode or per context in multiple mode. Note that you
must use at least one bridge group; data interfaces must belong to a bridge group.
Note
For a separate management interface (for supported models), a non-configurable bridge group (ID 101)
is automatically added to your configuration. This bridge group is not included in the bridge group limit.