The example of 元 interface for ASA 5505 is given below.Īssign physical port to a vlan like you do for switches: ASA#configure terminal ASA(config)#interface Ethernet0/0ĭefine the related Layer 3 interface and give it necessary configuration:ĪSA#configure terminal ASA(config)#interface Vlan10ĪSA(config-if)#ip address 10.254.1.241 255.255.255. The rest configuration like nameif, security leevel and ip address still applies.ĪSA(config)#interface GigabitEthernet1/4.10ĪSA(config-if)#ip address 10.254.21.1 255.255.255.0ĪSA 55-X use switching physical ports thus the layer 3 interfaces are defined more like in switch with SVI interfaces. On physical port the subinterface number must be defined. For example, the web server at the IP address. For Failover we will use Ge0/2, particularly Ge0/2.1 will be the Failover interface and Ge0/2.2 the state interface (by which the information about protocol States will be exchanged). The Outside interfaces on ASAs are Ge0/0 and LAN interfaces are Ge0/1. To create subinterface on routed port, use vlan tag for which the traffic will be landed and sourced (to and from subinterface). Auto NAT and Manual NAT on Cisco ASA firewalls can be used to configure. Let’s consider an example of active/standby Failover configuration (see diagram below).

Most ASA models use routed ports for subinterface creation. Technology: Network Security Area: Firewalls Vendor: Cisco Software: 8.X, 9.X Platform: Cisco ASA

Cisco asa 5505 configuration example