Guidelines and limitations, Default settings, Completing interface configuration in routed mode – Cisco ASA 5505 User Manual

Page 297

Advertising
background image

8-5

Cisco ASA 5500 Series Configuration Guide using the CLI

Chapter 8 Completing Interface Configuration (Routed Mode)

Guidelines and Limitations

Guidelines and Limitations

This section includes the guidelines and limitations for this feature.

Context Mode Guidelines

For the ASA 5510 and higher in multiple context mode, configure the physical interfaces in the
system execution space according to

Chapter 6, “Starting Interface Configuration

(ASA 5510 and Higher).”

Then, configure the logical interface parameters in the context execution

space according to this chapter.

The ASA 5505 does not support multiple context mode.

In multiple context mode, you can only configure context interfaces that you already assigned to the
context in the system configuration according to the

“Configuring Multiple Contexts” section on

page 5-14

.

PPPoE is not supported in multiple context mode.

Firewall Mode Guidelines

Supported in routed firewall mode. For transparent mode, see

Chapter 9, “Completing Interface

Configuration (Transparent Mode).”

Failover Guidelines

Do not finish configuring failover interfaces with the procedures in this chapter. See the

“Configuring

Active/Standby Failover” section on page 62-7

or the

“Configuring Active/Active Failover” section on

page 63-8

to configure the failover and state links. In multiple context mode, failover interfaces are

configured in the system configuration.

IPv6 Guidelines

Supports IPv6.

Default Settings

This section lists default settings for interfaces if you do not have a factory default configuration. For
information about the factory default configurations, see the

“Factory Default Configurations” section

on page 2-10

.

Default Security Level

The default security level is 0. If you name an interface “inside” and you do not set the security level
explicitly, then the ASA sets the security level to 100.

Note

If you change the security level of an interface, and you do not want to wait for existing connections to
time out before the new security information is used, you can clear the connections using the
clear local-host command.

Completing Interface Configuration in Routed Mode

This section includes the following topics:

Advertising