Configuring An Interface - Cisco 7604 Configuration Manual

Chapter 6 Configuring Interface Parameters

Configuring an Interface

Before you can allow traffic through the FWSM, you need to configure an interface name and an IP
address. You should also change the security level from the default, which is 0. If you name an interface
"inside" and you do not set the security level explicitly, then the FWSM sets the security level to 100.
To configure an interface, perform the following steps:
To specify the interface you want to configure, enter the following command:
Step 1
hostname(config)# interface {vlan number | mapped_name}
In multiple context mode, enter the mapped name if one was assigned using the allocate-interface
command.
For example, enter the following command:
hostname(config)# interface vlan 101
To name the interface, enter the following command:
Step 2
hostname(config-if)# nameif name
The name is a text string up to 48 characters, and is not case-sensitive. You can change the name by
reentering this command with a new value. Do not enter the no form, because that command causes all
commands that refer to that name to be deleted.
Note
Step 3 To set the security level, enter the following command:
hostname(config-if)# security-level number
Where number is an integer between 0 (lowest) and 100 (highest).
If you change the security level of an interface, and you do not want to wait for existing connections to
time out before the new security information is used, you can clear the connections using the
clear local-host command.
Step 4 To set the IP address, enter the following command:
hostname(config-if)# ip address ip_address [mask] [standby ip_address]
The standby keyword and address is used for failover. See
information.
Note
The following example configures parameters for VLAN 101:
hostname(config)# interface vlan 101
hostname(config-if)# nameif inside
hostname(config-if)# security-level 100
hostname(config-if)# ip address 10.1.1.1 255.255.255.0
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
After you set the name for an interface, the security-level is automatically changed to 0.
However, if the name is "inside," then the security level becomes 100.
To set an IPv6 address, see the
Configuring Interfaces for Routed Firewall Mode
Chapter 14, "Configuring Failover,"
"Configuring IPv6 on an Interface" section on page
for more
10-2.
6-3