Cisco ASA Series Cli Configuration Manual page 473

Chapter 1 Completing Interface Configuration (Routed Mode)
Figure 1-1
The following sample configuration shows the Cisco IOS route-map commands used to enable policy
routing in the network shown in
route-map intra-inter3 permit 0
!
route-map intra-inter2 permit 20
!
route-map intra-inter1 permit 10
Detailed Steps
Command
same-security-traffic permit
inter-interface
same-security-traffic permit
intra-interface
Communication Between Hosts on the Same Interface
IP cloud-1
10.6.36.0
Host
match ip address 103
set interface Vlan20
set ip next-hop 10.6.34.7
match ip address 102
set interface Vlan20
set ip next-hop 10.6.34.7
match ip address 101
set interface Vlan20
set ip next-hop 10.6.34.7
Purpose
Enables interfaces on the same security level so that they can communicate
with each other.
Enables communication between hosts connected to the same interface.
Completing Interface Configuration in Routed Mode
Host
IP cloud-2
Vlan60
10.6.37.0
MSFC
Vlan70 Vlan10
10.6.35.0
SVI, Vlan20
10.6.34.0
ASA
Figure 1-1:
Cisco ASA Series CLI Configuration Guide
IP cloud-3
Host
1-17