access-list sfrAccessList extended permit ip any any
class-map sfrclass
match access-list sfrAccessList
policy-map global_policy
class sfrclass
sfr fail-open monitor-only
service-policy global_policy global
ASAv Deployment Configuration
When you deploy the ASAv, you can pre-set many parameters that let you connect to the Management 0/0
interface using ASDM. A typical configuration includes the following settings:
•
Routed or Transparent firewall mode
•
Management 0/0 interface:
◦
Named
“
management
”
◦
IP address or DHCP
◦
Security level 0
◦
Management-only
For the ASAv on Microsoft Azure, the Management 0/0 interface allows through traffic,
so the Management-only setting is not enabled.
Note
•
Static route for the management host IP address (if it is not on the management subnet)
•
HTTP server enabled or disabled
•
HTTP access for the management host IP address
•
(Optional) Failover link IP addresses for GigabitEthernet 0/8, and the Management 0/0 standby IP
address
•
DNS server
•
Smart licensing ID token
•
Smart licensing Throughput Level and Standard Feature Tier
•
(Optional) Smart Call Home HTTP Proxy URL and port
•
(Optional) SSH management settings:
◦
Client IP addresses
◦
Local username and password
◦
Authentication required for SSH using the LOCAL database
•
(Optional) REST API enabled or disabled
CLI Book 1: Cisco ASA Series General Operations CLI Configuration Guide, 9.5
22
Getting Started
ASAv Deployment Configuration
