7-6
Cisco ASDM User Guide
OL-16647-01
Chapter 7 Configuring Interfaces in Single Mode
Configuring an Interface (Single Mode)
a. Click Add > Redundant Interface.
The Add Redundant Interface dialog box appears with the General tab selected.
b. In the Redundant ID field, enter an integer between 1 and 8.
c. From the Primary Interface drop-down list, choose the physical interface you want to be
primary.
Be sure to pick an interface that does not have a subinterface and that has not already been
allocated to a context.
d. From the Secondary Interface drop-down list, choose the physical interface you want to be
secondary.
e. Continue configuring the interface by following Step 2.
Step 2 In the Interface Name field, enter a name up to 48 characters in length.
Step 3 In the Security level field, enter a level between 0 (lowest) and 100 (highest).
See the “Default Security Level” section on page 7-4 for more information.
Step 4 (Optional) To set this interface as a management-only interface, check Dedicate this interface to
management-only.
Through traffic is not accepted on a management-only interface.
Step 5 If the interface is not already enabled, check Enable Interface.
Step 6 To set the IP address, follow these guidelines:
In routed firewall mode, set the IP address for all interfaces. In transparent firewall mode, do not set the
IP address for each interface, but rather set it for the whole security appliance or context. The exception
is for the Management 0/0 or 0/1 management-only interface, which does not pass through traffic. To set
the transparent firewall mode whole security appliance or context management IP address, see the
Management IP Address pane. To set the IP address of the Management interface or subinterface, use
this procedure.
For use with failover, you must set the IP address and standby address manually; DHCP and PPPoE are
not supported. Set the standby IP addresses on the Configuration > Device Management > High
Availability > Failover > Interfaces tab.
Use one of the following options to set the IP address:
• To set the IP address manually, click Use Static IP and enter the IP address and mask.
• To obtain an IP address from a DHCP server, click Obtain Address via DHCP.
a. (Optional) To obtain the default route from the DHCP server, check Obtain Default Route
Using DHCP.
b. (Optional) To assigns an administrative distance to the learned route, enter a value between 1
and 255 in the DHCP Learned Route Metric field. If this field is left blank, the administrative
distance for the learned routes is 1.
c. (Optional) To renew the lease, click Renew DHCP Lease.
d. (Optional) To enable tracking for DHCP-learned routes, check Enable Tracking for DHCP
Learned Routes. Set the following values:
Track ID—A unique identifier for the route tracking process. Valid values are from 1 to 500.
Track IP Address—Enter the IP address of the target being tracked. Typically, this would be the
IP address of the next hop gateway for the route, but it could be any network object available
off of that interface.