Cisco ASA Series Cli Configuration Manual page 485

Chapter 1 Completing Interface Configuration (Transparent Mode)
Detailed Steps
Command
Step 1
interface bvi bridge_group_number
Example:
hostname(config)# interface bvi 1
Step 2
ip address ip_address [mask]
[standby ip_address]
Example:
hostname(config-if)# ip address 10.1.3.1
255.255.255.0 standby 10.1.3.2
Examples
The following example sets the management address and standby address of bridge group 1:
hostname(config)# interface bvi 1
hostname(config-if)# ip address 10.1.3.1 255.255.255.0 standby 10.1.3.2
What to Do Next
Configure general interface parameters. See the
page
Configuring General Interface Parameters
This procedure describes how to set the name, security level, and bridge group for each transparent
interface.
To configure a separate management interface, see the
and Higher)" section on page
For the ASA 5510 and higher, you must configure interface parameters for the following interface types:
•
•
•
•
1-9.
1-12.
Physical interfaces
VLAN subinterfaces
Redundant interfaces
EtherChannel interfaces
Completing Interface Configuration in Transparent Mode
Purpose
Creates a bridge group, where bridge_group_number is an integer
between 1 and 100.
Specifies the management IP address for the bridge group.
Do not assign a host address (/32 or 255.255.255.255) to the
bridge group. Also, do not use other subnets that contain fewer
than 3 host addresses (one each for the upstream router,
downstream router, and transparent firewall) such as a /30 subnet
(255.255.255.252). The ASA drops all ARP packets to or from the
first and last addresses in a subnet. Therefore, if you use a /30
subnet and assign a reserved address from that subnet to the
upstream router, then the ASA drops the ARP request from the
downstream router to the upstream router.
The ASA does not support traffic on secondary networks; only
traffic on the same network as the management IP address is
supported.
The standby keyword and address is used for failover.
"Configuring General Interface Parameters" section on
"Configuring a Management Interface (ASA 5510
Cisco ASA Series CLI Configuration Guide
1-9