Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-17
Cisco ASA Series CLI Configuration Guide
Chapter 1 Completing Interface Configuration (Routed Mode)
Completing Interface Configuration in Routed Mode
Figure 1-1 Communication Between Hosts on the Same Interface
The following sample configuration shows the Cisco IOS route-map commands used to enable policy
routing in the network shown in Figure 1-1:
route-map intra-inter3 permit 0
match ip address 103
set interface Vlan20
set ip next-hop 10.6.34.7
!
route-map intra-inter2 permit 20
match ip address 102
set interface Vlan20
set ip next-hop 10.6.34.7
!
route-map intra-inter1 permit 10
match ip address 101
set interface Vlan20
set ip next-hop 10.6.34.7
Detailed Steps
Vlan70
10.6.36.0
Vlan10
10.6.35.0
Vlan60
10.6.37.0
SVI, Vlan20
10.6.34.0
Host Host
Host
ASA
MSFC
IP cloud-2
IP cloud-3IP cloud-1
Command Purpose
same-security-traffic permit
inter-interface
Enables interfaces on the same security level so that they can communicate
with each other.
same-security-traffic permit
intra-interface
Enables communication between hosts connected to the same interface.

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English