9-7
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter9 Completing Interface Configuration (Transparent Mode)
Completing Interface Configuration in Transparent Mode
Step2 (Multiple context mode) Allocate interfaces to the context according to the “Configuring Multiple
Contexts” section on page5-14.
Step3 (Multiple context mode) Enter the changeto context name command to change to the context you want
to configure.Configure one or more bridge groups, including the IPv4 address. See the “Configuring
Bridge Groups” section on page9-7.
Step4 Configure general interface parameters, including the interface name and security level. See the
“Configuring General Interface Parameters” section on page9-8.
Step5 (Optional; not supported for the ASA 5505) Configure a management interface. See the “Configuring a
Management Interface (ASA 5510 and Higher)” section on page9-11.
Step6 (Optional) Configure the MAC address and the MTU. See the “Configuring the MAC Address and
MTU” section on page 9-12.
Step7 (Optional) Configure IPv6 addressing. See the “Configuring IPv6 Addressing” section on page 9-15.
Step8 (Optional) Allow same security level communication, either by allowing communication between two
interfaces or by allowing traffic to enter and exit the same interface. See the “Allowing Same Security
Level Communication” section on page 9-18.
Configuring Bridge Groups
Each bridge group requires a management IP address. The ASA uses this IP address as the source address
for packets originating from the bridge group. The management IP address must be on the same subnet
as the connected network. For IPv4 traffic, the management IP address is required to pass any traffic.
For IPv6 traffic, you must, at a minimum, configure the link-local addresses to pass traffic, but a global
management address is recommended for full functionality, including remote management and other
management operations.
Guidelines and Limitations
You can configure up to 8 bridge groups in single mode or per context in multiple mode. Note that you
must use at least one bridge group; data interfaces must belong to a bridge group.
Note For a separate management interface (for supported models), a non-configurable bridge group (ID 101)
is automatically added to your configuration. This bridge group is not included in the bridge group limit.