Cisco ASA Series Cli Configuration Manual page 484

Completing Interface Configuration in Transparent Mode
Task Flow for Completing Interface Configuration
Step 1
Set up your interfaces depending on your model:
•
•
•
Step 2
(Multiple context mode) Allocate interfaces to the context according to the
Contexts" section on page
Step 3
(Multiple context mode) Enter the changeto context name command to change to the context you want
to configure.Configure one or more bridge groups, including the IPv4 address. See the
Bridge Groups" section on page
Step 4
Configure general interface parameters, including the interface name and security level. See the
"Configuring General Interface Parameters" section on page
Step 5
(Optional; not supported for the ASA 5505) Configure a management interface. See the
Management Interface (ASA 5510 and Higher)" section on page
Step 6
(Optional) Configure the MAC address and the MTU. See the
MTU" section on page
Step 7
(Optional) Configure IPv6 addressing. See the
Step 8
(Optional) Allow same security level communication, either by allowing communication between two
interfaces or by allowing traffic to enter and exit the same interface. See the
Level Communication" section on page
Configuring Bridge Groups
Each bridge group requires a management IP address. The ASA uses this IP address as the source address
for packets originating from the bridge group. The management IP address must be on the same subnet
as the connected network. For IPv4 traffic, the management IP address is required to pass any traffic.
For IPv6 traffic, you must, at a minimum, configure the link-local addresses to pass traffic, but a global
management address is recommended for full functionality, including remote management and other
management operations.
Guidelines and Limitations
You can configure up to 8 bridge groups in single mode or per context in multiple mode. Note that you
must use at least one bridge group; data interfaces must belong to a bridge group.
Note
For a separate management interface (for supported models), a non-configurable bridge group (ID 101)
is automatically added to your configuration. This bridge group is not included in the bridge group limit.
Cisco ASA Series CLI Configuration Guide
1-8
ASA 5510 and higher—Chapter 1, "Starting Interface Configuration (ASA 5510 and Higher)."
ASA 5505—Chapter 1, "Starting Interface Configuration (ASA 5505)."
ASASM—Chapter 1, "Configuring the Switch for Use with the ASA Services Module."
1-15.
1-13.
Chapter 1 Completing Interface Configuration (Transparent Mode)
1-8.
"Configuring IPv6 Addressing" section on page
1-18.
"Configuring Multiple
1-9.
1-12.
"Configuring the MAC Address and
"Allowing Same Security
"Configuring
"Configuring a
1-16.