Cisco ASA Series Cli Configuration Manual page 1799

Chapter 1 Configuring LAN-to-LAN IPsec VPNs
Step 3
Configure connection profiles, policies, crypto maps, and so on, just as would with single context VPN
configuration of site-to-site VPN.
Configuring Interfaces
An ASA has at least two interfaces, referred to here as outside and inside. Typically, the outside interface
is connected to the public Internet, while the inside interface is connected to a private network and is
protected from public access.
To begin, configure and enable two interfaces on the ASA. Then, assign a name, IP address and subnet
mask. Optionally, configure its security level, speed, and duplex operation on the security appliance.
Note
To configure interfaces, perform the following steps, using the command syntax in the examples:
Step 1
To enter Interface configuration mode, in global configuration mode enter the interface command with
the default name of the interface to configure. In the following example the interface is ethernet0.
hostname(config)# interface ethernet0/0
hostname(config-if)#
Step 2
To set the IP address and subnet mask for the interface, enter the ip address command. In the following
example the IP address is 10.10.4.100 and the subnet mask is 255.255.0.0.
hostname(config-if)# ip address 10.10.4.100 255.255.0.0
hostname(config-if)#
Step 3
To name the interface, enter the nameif command, maximum of 48 characters. You cannot change this
name after you set it. In the following example the name of the ethernet0 interface is outside.
hostname(config-if)# nameif outside
hostname(config-if)##
Step 4
To enable the interface, enter the no version of the shutdown command. By default, interfaces are
disabled.
hostname(config-if)# no shutdown
hostname(config-if)#
Step 5
To save your changes, enter the write memory command:
hostname(config-if)# write memory
hostname(config-if)#
Step 6
To configure a second interface, use the same procedure.
config-url disk0:/sm_s2s_ik1_ip4_no_webvpn.txt
join-failover-group 1
The ASA's outside interface address (for both IPv4/IPv6) cannot overlap with the private side
address space.
Cisco ASA Series CLI Configuration Guide
Configuring Interfaces
1-3