Filter
Top Products
45-20
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 45 Managing Firewall Devices
Configuring Firewall Device Interfaces
Depending on device type, operating-system version and operating mode (router or transparent), the
Type options presented will be two, three or all of the following:
–
Physical Interface – Choose this option to configure a physical interface on the device.
–
Sub-Interface – Choose this option to configure a logical interface (or VLAN connection)
associated with a previously defined physical interface. Refer to Configuring Subinterfaces
(PIX/ASA), page 45-7 for more information.
–
Redundant – Choose this option to configure two physical interfaces as a single logical
“redundant interface.” Refer to Configuring Redundant Interfaces, page 45-7 for more
information.
–
EtherChannel – Choose this option to configure a logical interface consisting of a bundle of
up to eight individual Ethernet links; this bundle is known as an EtherChannel, or a port-channel
interface. (This option is available only on ASA 8.4+ devices.) Refer to Configuring
EtherChannels, page 45-8, for more information.
2. Below the Type option, the dialog boxes present up to three tabbed panels. Again, this depends on
device type, operating-system version and operating mode.
The PIX 7.0+ Add Interface and Edit Interface dialog boxes present two tabbed panels: General and
Advanced. The ASA 7.0+ Add Interface and Edit Interface dialog boxes present three tabbed panels:
General, Advanced and IPv6.
–
Configure the General options, as appropriate. This panel is described in Add/Edit Interface
Dialog Box: General Tab (PIX 7.0+/ASA/FWSM), page 45-20.
–
Configure the Advanced-panel options, as appropriate. This panel is described in Add/Edit
Interface Dialog Box: Advanced Tab (ASA/PIX 7.0+), page 45-27.
–
Configure the IPv6 options, as appropriate. This panel is described in Configuring IPv6
Interfaces (ASA/FWSM), page 45-29.
3. When you have finished configuring this interface, click OK to close the dialog box and return to
the device Interfaces page.
Add/Edit Interface Dialog Box: General Tab (PIX 7.0+/ASA/FWSM)
The Add/Edit Interface Dialog Box (PIX 7.0+/ASA/FWSM), page 45-19, is used to define and configure
interfaces, subinterfaces, VLAN interfaces, and redundant, and EtherChannel interfaces on firewall
devices. You can access the Add/Edit Interface dialog box from the Interfaces page. See Managing
Device Interfaces, Hardware Ports, and Bridge Groups, page 45-14 for more information.
Note In the following descriptions, the term “interface” may be used generically to refer to any of these types
of interface.
The General panel of this dialog box is used to configure general interface settings, including Name,
Security Level and IP Type parameters. Note that many of the parameters presented in this panel vary
according to device type and version, operational mode (routed versus transparent), and whether the
device hosts a single or multiple contexts. Thus, some of the options in the following table may not
appear for the device you are configuring.
Related Topics
• Configuring Subinterfaces (PIX/ASA), page 45-7
• Configuring Redundant Interfaces, page 45-7
• Configuring EtherChannels, page 45-8