Cisco Systems ASA 5540 Network Router User Manual


  Open as PDF
of 2086
 
15-8
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter 15 Completing Interface Configuration (TransparentMode, 8.4 and Later)
Completing Interface Configuration in Transparent Mode (8.4 and Later)
Step 2 In the Bridge Group ID field, enter the bridge group ID between 1 and 100.
Step 3 In the IP Address field, enter the management IPv4 address.
The ASA does not support traffic on secondary networks; only traffic on the same network as the
management IP address is supported.
Step 4 In the Subnet Mask field, enter the subnet mask or choose one from the menu.
Do not assign a host address (/32 or 255.255.255.255) to the transparent firewall. Also, do not use other
subnets that contain fewer than 3 host addresses (one each for the upstream router, downstream router,
and transparent firewall) such as a /30 subnet (255.255.255.252). The ASA drops all ARP packets to or
from the first and last addresses in a subnet. For example, if you use a /30 subnet and assign a reserved
address from that subnet to the upstream router, then the ASA drops the ARP request from the
downstream router to the upstream router.
Step 5 (Optional) In the Description field, enter a description for this bridge group.
Step 6 Click OK.
Step 7 A Bridge Group Virtual Interface (BVI) is added to the interface table, along with the physical and
subinterfaces.
What to Do Next
Configure general interface parameters. See the “Configuring General Interface Parameters” section on
page 15-8.
Configuring General Interface Parameters
This procedure describes how to set the name, security level, and bridge group for each transparent
interface.
To configure a separate management interface, see the “Configuring a Management Interface (ASA 5510
and Higher)” section on page 15-11.
For the ASA 5510 and higher, you must configure interface parameters for the following interface types: