Cisco Systems CL-28826-01 Security Camera User Manual


  Open as PDF
of 2616
 
45-26
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 45 Managing Firewall Devices
Configuring Firewall Device Interfaces
Primary Interface
Secondary Interface
When Redundant Interface is the chosen interface Type, choose the primary
member of the redundant interface pair from the Primary Interface list of
available interfaces. Available interfaces are presented by Hardware Port
IDs, as named interfaces cannot be used for a redundant interface pair.
Similarly, choose the secondary member of the redundant interface pair from
the Secondary Interface list of available interfaces.
Note Member interfaces must be enabled and of the same type (e.g.,
GigabitEthernet), and cannot have a Name, IP Address, or Security
Level assigned. In fact, do not configure any options other than
Duplex and Speed on the member interfaces.
These options available on ASA 5505 devices only.
Block Traffic To Restricts this VLAN interface from initiating contact with the VLAN chosen
here.
Backup Interface Choose a VLAN interface as a backup interface, for example, to an ISP. The
backup interface does not pass traffic unless the default route through the
primary interface fails. To ensure that traffic can pass over the backup
interface, be sure to configure default routes on both the primary and backup
interfaces so that the backup interface can be used when the primary fails.
Active MAC Address
Standby MAC Address
Use the Active MAC Address field to manually assign a private MAC
address to the interface; the Standby MAC Address field can be used to set
a standby MAC address for use with device-level failover.
Refer to Device Interface: MAC Address, page 45-38 for more information
about these fields.
EtherChannel Interface options; available on ASA 8.4.1+ devices only.
EtherChannel ID When EtherChannel is the chosen interface Type, enter an identifier for this
EtherChannel (also referred to as a “port-channel”). Valid values are 1 to
48—you can define up to 48 port-channel groups. See Configuring
EtherChannels, page 45-8, for more information.
Available
Interfaces/Members in
Group
When EtherChannel is the chosen interface Type, you can assign interfaces
to this EtherChannel group by selecting them in the Available Interfaces list
and then clicking the >> button to add them to the members list to the right.
Each channel group can have up to eight active interfaces, although you can
assign up to 16 interfaces to the group. While only eight interfaces can be
active, the remaining interfaces act as stand-by links in case of individual
interface failure.
Note All interfaces in the channel group must be the same type and speed.
The first interface added to the channel group determines the type
and speed for the group.
See Configuring EtherChannels, page 45-8, for more information.
Table 45-3 General tab: Add/Edit Interface Dialog Box (Continued)
Element Description