Example 6-3. Configuring Interface Parameters in Single Mode
hostname(config)# interface Ethernet1
hostname(config-if)# nameif inside
hostname(config-if)# security-level 100
hostname(config-if)# ip address 10.1.1.1 255.255.255.0
hostname(config-if)# no shutdown
Example 6-4 shows how to configure interface parameters in multiple contexts mode for the system
configuration. The example creates a subinterface Ethernet1.100, by putting it in VLAN 100 allocating the
Ethernet1.100 subinterface to contextA.
Example 6-4. Configuring Interface Parameters in Multiple Mode
hostname(config)# interface Ethernet1
hostname(config-if)# speed 100
hostname(config-if)# duplex full
hostname(config-if)# no shutdown
hostname(config-if)# interface Ethernet1.100
hostname(config-subif)# vlan 100
hostname(config-subif)# no shutdown
hostname(config-subif)# context contextA
hostname(config-ctx)# ...
hostname(config-ctx)# allocate-interface Ethernet1.100
By default, the Adaptive Security Algorithm does not permit interfaces on the same security level to
communicate with each other. To explicitly permit this, use the following command from the global
configuration mode to enable traffic flow between same security level interfaces without access lists.
Pages:
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274