Cisco 5505 - ASA Firewall Edition Bundle, Cli Configuration Manual, Page: 99 / 2164

1-5
Cisco ASA Series ASDM Configuration Guide
Chapter 1 Configuring the Switch for Use with the ASA Services Module
Using the MSFC as a Directly Connected Router
Detailed Steps
Examples
The following example shows how to create three firewall VLAN groups: one for each ASASM, and one
that includes VLANs assigned to both ASASMs:
Router(config)# firewall vlan-group 50 55-57
Router(config)# firewall vlan-group 51 70-85
Router(config)# firewall vlan-group 52 100
Router(config)# firewall module 5 vlan-group 50,52
Router(config)# firewall module 8 vlan-group 51,52
Using the MSFC as a Directly Connected Router
If you want to use the MSFC as a directly connected router (for example, as the default gateway
connected to the ASASM outside interface), then add an ASASM VLAN interface to the MSFC as a
switched virtual interface (SVI).
This section includes the following topics:
•
Information About SVIs, page 1-6
•
Configuring SVIs, page 1-8
Command Purpose
Step 1
firewall vlan-group firewall_group vlan_range
Example:
Router(config)# firewall vlan-group 50 55-57
Assigns VLANs to a firewall group.
The firewall_group argument is an integer. The
vlan_range argument can be one or more VLANs (2
to 1000 and from 1025 to 4094) identified in one of
the following ways:
•
A single number ( n )
•
A range ( n-x )
Separate numbers or ranges by commas, as shown in
the following example:
5,7-10,13,45-100
Step 2
firewall [ switch { 1 | 2 }] module slot vlan-group
firewall_group
Example:
Router(config)# firewall module 5 vlan-group 50,52
Assigns the firewall groups to the ASASM.
For a switch in a VSS, enter the switch argument.
To view the slots where the ASASM is installed,
enter the
show module command.
The firewall_group argument is one or more group
numbers, which can be one of the following:
•
A single number ( n )
•
A range ( n-x )
Separate numbers or ranges by commas, as shown in
the following example:
5,7-10