Using The Msfc As A Directly Connected Router - Cisco ASA Series Cli Configuration Manual

Chapter 1 Configuring the Switch for Use with the ASA Services Module
Detailed Steps
Command
Step 1
firewall vlan-group firewall_group vlan_range
Example:
Router(config)# firewall vlan-group 50 55-57
Step 2
firewall [switch {1 |2}] module slot vlan-group
firewall_group
Example:
Router(config)# firewall module 5 vlan-group 50,52
Examples
The following example shows how to create three firewall VLAN groups: one for each ASASM, and one
that includes VLANs assigned to both ASASMs:
Router(config)# firewall vlan-group 50 55-57
Router(config)# firewall vlan-group 51 70-85
Router(config)# firewall vlan-group 52 100
Router(config)# firewall module 5 vlan-group 50,52
Router(config)# firewall module 8 vlan-group 51,52

Using the MSFC as a Directly Connected Router

If you want to use the MSFC as a directly connected router (for example, as the default gateway
connected to the ASASM outside interface), then add an ASASM VLAN interface to the MSFC as a
switched virtual interface (SVI).
This section includes the following topics:
•
•
Information About SVIs, page 1-6
Configuring SVIs, page 1-8
Using the MSFC as a Directly Connected Router
Purpose
Assigns VLANs to a firewall group.
The firewall_group argument is an integer. The
vlan_range argument can be one or more VLANs (2
to 1000 and from 1025 to 4094) identified in one of
the following ways:
•
A single number (n)
•
A range (n-x)
Separate numbers or ranges by commas, as shown in
the following example:
5,7-10,13,45-100
Assigns the firewall groups to the ASASM.
For a switch in a VSS, enter the switch argument.
To view the slots where the ASASM is installed,
enter the show module command.
The firewall_group argument is one or more group
numbers, which can be one of the following:
•
A single number (n)
•
A range (n-x)
Separate numbers or ranges by commas, as shown in
the following example:
5,7-10
Cisco ASA Series ASDM Configuration Guide
1-5