1-18
Cisco ASA Series CLI Configuration Guide
Chapter 1 Completing Interface Configuration (Transparent Mode)
Completing Interface Configuration in Transparent Mode
Detailed Steps
Configuring IPv6 Neighbor Discovery
See Chapter 1, “Configuring IPv6 Neighbor Discovery,” to configure IPv6 neighbor discovery.
Allowing Same Security Level Communication
By default, interfaces on the same security level cannot communicate with each other, and packets
cannot enter and exit the same interface. This section describes how to enable inter-interface
communication when interfaces are on the same security level.
Information About Inter-Interface Communication
Allowing interfaces on the same security level to communicate with each other is useful if you want
traffic to flow freely between all same security interfaces without access lists.
If you enable same security interface communication, you can still configure interfaces at different
security levels as usual.
Command Purpose
Step 1
For the bridge group:
interface bvi bridge_group_id
For the management interface:
interface management_interface_id
Example:
hostname(config)# interface bvi 1
If you are not already in interface configuration mode, enters
interface configuration mode.
Step 2
ipv6 address ipv6-address/prefix-length
[standby ipv6-address]
Example:
hostname(config-if)# ipv6 address
2001:0DB8::BA98:0:3210/48
Assigns a global address to the interface. When you assign a
global address, the link-local address is automatically created for
the interface (for a bridge group, for each member interface).
standby specifies the interface address used by the secondary unit
or failover group in a failover pair.
Note The eui-64 keyword to use the Modified EUI-64 interface
ID for the interface ID is not supported in transparent
mode.
See the “IPv6 Addresses” section on page 1-5 for more
information about IPv6 addressing.
Step 3
(Optional)
ipv6 enforce-eui64 if_name
Example:
hostname(config)# ipv6 enforce-eui64
inside
Enforces the use of Modified EUI-64 format interface identifiers
in IPv6 addresses on a local link.
The if_name argument is the name of the interface, as specified by
the nameif command, on which you are enabling the address
format enforcement.
See the “Modified EUI-64 Interface IDs” section on page 1-16 for
more information.