Cisco Systems Licensing Requirements for Completing Interface Configuration in Transparent Mode

16-3
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter16 Completing Interface Configuration (Transparent Mode, 8.3 and Earlier)
Licensing Requirements for Completing Interface Configuration in Transparent Mode
If you enable communication for same security interfaces, you can configure established commands
for both directions.
Licensing Requirements for Completing Interface Configuration
in Transparent Mode
Guidelines and Limitations
This section includes the guidelines and limitations for this feature.
Context Mode Guidelines
•In multiple context mode, configure the physical interfaces in the system execution space according
to Chapter 12, “Starting Interface Configuration (ASA5510 and Higher).” Then, configure the
logical interface parameters in the context execution space according to this chapter.
•You can only configure context interfaces that you already assigned to the context in the system
configuration.
Firewall Mode Guidelines
•For IPv4, a management IP address is required for both management traffic and for traffic to pass
through the ASA.
Unlike routed mode, which requires an IP address for each interface, a transparent firewall has an
IP address assigned to the entire device. The ASA uses this IP address as the source address for
packets originating on the ASA, such as system messages or AAA communications. In addition to
the global management address, you can optionally configure a management interface; see the
“Management Interface” section on page 12-2 for more information.
The management IP address must be on the same subnet as the connected network. You cannot set
the subnet to a host subnet (255.255.255.255). The ASA does not support traffic on secondary
networks; only traffic on the same network as the management IP address is supported. See the
“Setting the Management IP Address for a Transparent Firewall (8.3 and Earlier)” section on
page 16-4 for more information about management IP subnets.
•For IPv6, at a minimum you need to configure link-local addresses for each interface for through
traffic. For full functionality, including the ability to manage the ASA, you need to configure a
global IPv6 address.
•For multiple context mode, each context must use different interfaces; you cannot share an interface
across contexts.
•For multiple context mode, each context typically uses a different subnet. You can use overlapping
subnets, but your network topology requires router and NAT configuration to make it possible from
a routing standpoint.
Model License Requirement
All models Base License.