Cisco ASA Series User Manual

1-17
Cisco ASA Series CLI Configuration Guide
Chapter 1 Completing Interface Configuration (Routed Mode)
Completing Interface Configuration in Routed Mode
Figure 1-1 Communication Between Hosts on the Same Interface
The following sample configuration shows the Cisco IOS route-map commands used to enable policy
routing in the network shown in Figure 1-1:
route-map intra-inter3 permit 0
match ip address 103
set interface Vlan20
set ip next-hop 10.6.34.7
!
route-map intra-inter2 permit 20
match ip address 102
set interface Vlan20
set ip next-hop 10.6.34.7
!
route-map intra-inter1 permit 10
match ip address 101
set interface Vlan20
set ip next-hop 10.6.34.7
Detailed Steps
Vlan70
10.6.36.0
Vlan10
10.6.35.0
Vlan60
10.6.37.0
SVI, Vlan20
10.6.34.0
Host Host
Host
ASA
MSFC
IP cloud-2
IP cloud-3IP cloud-1
Command Purpose
same-security-traffic permit
inter-interface
Enables interfaces on the same security level so that they can communicate
with each other.
same-security-traffic permit
intra-interface
Enables communication between hosts connected to the same interface.

Cisco ASA Series Specifications

General

Model	ASA 5505
Interfaces	Varies by model (Fast Ethernet, Gigabit Ethernet, 10 Gigabit Ethernet, etc.)
High Availability	Active/Standby or Active/Active (varies by model)
Power Supply	Varies by model
Form Factor	Varies by model
Operating System	Cisco ASA Software
IPsec VPN	Supported
SSL VPN	Supported
IPS Throughput	Varies by model