
6-3
Cisco Security Appliance Command Line Configuration Guide
OL-6721-01
Chapter 6 Configuring Interface Parameters
Configuring the Interface
The physical interface types include the following:
• ethernet
• gigabitethernet
For the PIX 500 series security appliance, enter the type followed by the port number, for example,
ethernet0.
Append the subinterface ID to the physical interface ID separated by a period (.).
In multiple context mode, enter the mapped name if one was assigned using the allocate-interface
command.
For example, enter the following command:
hostname(config)# interface gigabitethernet1.1
Step 2 To name the interface, enter the following command:
hostname(config-if)# nameif
name
The name is a text string up to 48 characters, and is not case-sensitive. You can change the name by
reentering this command with a new value. Do not enter the no form, because that command causes all
commands that refer to that name to be deleted.
Step 3 To set the security level, enter the following command:
hostname(config-if)# security-level
number
Where number is an integer between 0 (lowest) and 100 (highest).
Step 4 To set the IP address or routed mode only, enter one of the following commands.
Note To set an IPv6 address, see the “Configuring IPv6 on an Interface” section on page 9-2.
• To set the IP address manually, enter the following command:
hostname(config-if)# ip address
ip_address
[
mask
] [standby
ip_address
]
The standby keyword and address is used for failover. See Chapter 11, “Configuring Failover,” for
more information.
• To obtain an IP address from a DHCP server, enter the following command:
hostname(config-if)# ip address dhcp [setroute]
Reenter this command to reset the DHCP lease and request a new lease.
You cannot set this command at the same time as the ip address command.
If you enable the setroute option, do not configure a default route using the static command.
If you do not enable the interface using the no shutdown command before you enter the ip address
dhcp command, some DHCP requests might not be sent.
Step 5 To set an interface to management-only mode, enter the following command:
hostname(config-if)# management-only
Step 6 To enable the interface, if it is not already enabled, enter the following command:
hostname(config-if)# no shutdown
Comentarios a estos manuales