8-24
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 8 Configuring Interfaces
Completing Interface Configuration (All Models)
Track IP Address—Enter the IP address of the target being tracked. Typically, this would be the
IP address of the next hop gateway for the route, but it could be any network object available
off of that interface.
Note Route tracking is only available in single, routed mode.
SLA ID—A unique identifier for the SLA monitoring process. Valid values are from 1 to
2147483647.
Monitor Options—Click this button to open the Route Monitoring Options dialog box. In the
Route Monitoring Options dialog box you can configure the parameters of the tracked object
monitoring process.
e. (Optional) To renew the lease, click Renew DHCP Lease.
• (Single, routed mode only) To obtain an IP address using PPPoE, check Use PPPoE.
a. In the Group Name field, specify a group name.
b. In the PPPoE Username field, specify the username provided by your ISP.
c. In the PPPoE Password field, specify the password provided by your ISP.
d. In the Confirm Password field, retype the password.
e. For PPP authentication, click either the PAP, CHAP, or MSCHAP radio button.
PAP passes cleartext username and password during authentication and is not secure. With
CHAP, the client returns the encrypted [challenge plus password], with a cleartext username in
response to the server challenge. CHAP is more secure than PAP, but it does not encrypt data.
MSCHAP is similar to CHAP but is more secure because the server stores and compares only
encrypted passwords rather than cleartext passwords as in CHAP. MSCHAP also generates a
key for data encryption by MPPE.
f. (Optional) To store the username and password in Flash memory, check the Store Username
and Password in Local Flash check box.
The adaptive security appliance stores the username and password in a special location of
NVRAM. If an Auto Update Server sends a clear configure command to the adaptive security
appliance, and the connection is then interrupted, the adaptive security appliance can read the
username and password from NVRAM and re-authenticate to the Access Concentrator.
g. (Optional) To display the PPPoE IP Address and Route Settings dialog box where you can
choose addressing and tracking options, click IP Address and Route Settings. See the “PPPoE
IP Address and Route Settings” section on page 8-25 for more information.
Step 8 (Optional) In the Description field, enter a description for this interface.
The description can be up to 240 characters on a single line, without carriage returns. In the case of a
failover or state link, the description is fixed as “LAN Failover Interface,” “STATE Failover Interface,”
or “LAN/STATE Failover Interface,” for example. You cannot edit this description. The fixed description
overwrites any description you enter here if you make this interface a failover or state link.
Note (ASA 5510 and higher) For information about the Configure Hardware Properties button, see the
“Enabling the Physical Interface and Configuring Ethernet Parameters” section on page 8-10.
Step 9 Click OK.
To Next Page
Loading...
Need help?
General
