Cisco 6500 - Catalyst Series 10 Gigabit EN Interface Module Expansion, Configuration Manual, Page: 127 / 742

6-3
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Chapter 6 Configuring Interface Parameters
Configuring Interfaces for Routed Firewall Mode
Configuring an Interface
Before you can allow traffic through the FWSM, you need to configure an interface name and an IP
address. You should also change the security level from the default, which is 0. If you name an interface
“inside” and you do not set the security level explicitly, then the FWSM sets the security level to 100.
To configure an interface, perform the following steps:
Step 1
To specify the interface you want to configure, enter the following command:
hostname(config)#
interface
{
vlan
number | mapped_name }
In multiple context mode, enter the mapped name if one was assigned using the allocate-interface
command.
For example, enter the following command:
hostname(config)#
interface vlan 101
Step 2 To name the interface, enter the following command:
hostname(config-if)# nameif name
The name is a text string up to 48 characters, and is not case-sensitive. You can change the name by
reentering this command with a new value. Do not enter the no form, because that command causes all
commands that refer to that name to be deleted.
Note
After you set the name for an interface, the security-level is automatically changed to 0.
However, if the name is “inside,” then the security level becomes 100.
Step 3
To set the security level, enter the following command:
hostname(config-if)# security-level number
Where number is an integer between 0 (lowest) and 100 (highest).
If you change the security level of an interface, and you do not want to wait for existing connections to
time out before the new security information is used, you can clear the connections using the
clear local-host command.
Step 4 To set the IP address, enter the following command:
hostname(config-if)# ip address ip_address [ mask ] [ standby ip_address ]
The standby keyword and address is used for failover. See Chapter 14, “Configuring Failover,” for more
information.
Note
To set an IPv6 address, see the “Configuring IPv6 on an Interface” section on page 10-2 .
The following example configures parameters for VLAN 101:
hostname(config)# interface vlan 101
hostname(config-if)# nameif inside
hostname(config-if)# security-level 100
hostname(config-if)# ip address 10.1.1.1 255.255.255.0