Configuration | Interfaces | Ethernet 1 2 3
3-9
VPN 3000 Concentrator Series User Guide
IPSec LAN-to-LAN, for example. You should designate only one VPN Concentrator interfac e as a
public interface.
MAC Address
This is the unique hardware MAC (Medium Access Control) address for this interface, displayed in
6-byte hexadecimal notation. You cannot change this address.
Filter
The filter governs the handling of data packets through this interface: whether to forward or drop,
according to configured criteria. Cisco supplies three default filters that you can modify and use with the
VPN Concentrator. You can configure filters on the Configuration | Policy Management | Traffic Management
screens.
Click the drop-down menu button and select the filter to apply to this interface:
1. Private (Default) = Allow all packets except source-routed IP packets. Cisco supplies this default
filter for Ethernet 1, but it is not selected by default.
2. Public (Default) = Allow inbound and outbound tunneling protocols plus ICMP and VRRP. Allow
fragmented IP packets. Drop everything else, including source-routed p ackets. Cisco supplies this
default filter for Ethernet 2, and it is selected by default for Ethernet 2.
3. External (Default) = No rules applied to this filter. Drop all packets. Cisco supplies this default filter
for Ethernet 3, but it is not selected by default.
–None– = No filter applied to the interface, which means there are no restrictions on data packets.
This is the default selection for Ethernet 1 and 3.
Other filters that you have configured also appear in this menu.
Speed
Click the drop-down menu button and select the interface speed:
10 Mbps = Fix the speed at 10 megabits per second (10Base-T networks)
100 Mbps = Fix the speed at 100 megabits per second (100Base-T networks)
10/100 auto = Let the VPN Concentrator automatically detect and set the appropriate speed, either 10
or 100 Mbps (default). Be sure that the port on the active network device (hub, switch, router, etc.)
to which you connect this interface is also set to automatically negotiate the speed. Otherwise,
select the appropriate fixed speed.
Duplex
Click the drop-down menu button and select the interface transmission mode:
Auto = Let the VPN Concentrator automatically detect and set the appropriate transmission mode,
either full or half duplex (default). Be sure that the port on the active network device (hub, switch,
router, etc.) to which you connect this interface is also set to automatically negotiate the
transmission mode. Otherwise, select the appropriate fixed mo de.
Full-Duplex = Fix the transmission mode as full duplex: transmission in both directions at the same
time.
Half-Duplex = Fix the transmission mode as half duplex: transmission in on ly one direction at a time.