Cisco FirePOWER ASA 5500 series Configuration Manual page 90

Configuring and Enabling Subinterfaces
If you use subinterfaces, you typically do not also want the physical interface to pass traffic, because the
Note
physical interface passes untagged packets. Because the physical interface must be enabled for the
subinterface to pass traffic, ensure that the physical interface does not pass traffic by leaving out the
nameif command. If you want to let the physical interface pass untagged packets, you can configure the
nameif command as usual. See the
information about completing the interface configuration.
To add a subinterface and assign a VLAN to it, perform the following steps:
To specify the new subinterface, enter the following command:
Step 1
hostname(config)# interface physical_interface.subinterface
See the
ID.
The subinterface ID is an integer between 1 and 4294967293.
For example, enter the following command:
hostname(config)# interface gigabitethernet0/1.100
To specify the VLAN for the subinterface, enter the following command:
Step 2
hostname(config-subif)# vlan vlan_id
The vlan_id is an integer between 1 and 4094. Some VLAN IDs might be reserved on connected
switches, so check the switch documentation for more information.
You can only assign a single VLAN to a subinterface, and not to the physical interface. Each subinterface
must have a VLAN ID before it can pass traffic. To change a VLAN ID, you do not need to remove the
old VLAN ID with the no option; you can enter the vlan command with a different VLAN ID, and the
security appliance changes the old ID.
To enable the subinterface, enter the following command:
Step 3
hostname(config-subif)# no shutdown
To disable the interface, enter the shutdown command. If you shut down an interface in the system
execution space, then that interface is shut down in all contexts that share it.
Cisco Security Appliance Command Line Configuration Guide
5-4
"Configuring and Enabling RJ-45 Interfaces"
Chapter 5
"Configuring Interface Parameters" section on page 7-1
section for a description of the physical interface
Configuring Ethernet Settings and Subinterfaces
for more
OL-10088-01