Configure a Passive Interface
This section describes how to:
-
Enable the interface. By default, interfaces are disabled.
-
Set the interface mode to Passive or ERSPAN. For ERSPAN interfaces, you will set the ERSPAN parameters and the IP address.
-
Change the MTU. By default, the MTU is set to 1500 bytes. For more information about the MTU, see About the MTU.
-
Set a specific speed and duplex (if available). By default, speed and duplex are set to Auto.
|
For the Secure Firewall Threat Defense on the FXOS chassis, you configure basic interface settings on the Firepower 4100/9300. See Configure a Physical Interface for more information. |
Before you begin
-
If you are using EtherChannels, add them according to Configure an EtherChannel.
Procedure
| 1 |
Select and click Edit ( |
| 2 |
Click Edit ( |
| 3 |
In the Mode drop-down list, choose Passive or Erspan. |
| 4 |
Enable the interface by checking the Enabled check box. |
| 5 |
In the Name field, enter a name up to 48 characters in length. |
| 6 |
From the Security Zone drop-down list, choose a security zone or add a new one by clicking New. |
| 7 |
(Optional) Add a description in the Description field. The description can be up to 200 characters on a single line, without carriage returns. |
| 8 |
(Optional) On General, set the MTU between 64 and 9198 bytes; for the Secure Firewall Threat Defense Virtual and Secure Firewall Threat Defense on the FXOS chassis, the maximum is 9000 bytes. The default is 1500 bytes. |
| 9 |
For ERSPAN interfaces, set the following parameters:
|
| 10 |
For ERSPAN interfaces, set the IPv4 address and mask on IPv4. |
| 11 |
(Optional) Set the duplex and speed by clicking Hardware Configuration. The exact speed and duplex options depend on your hardware.
|
| 12 |
Click OK. |
| 13 |
Click Save. You can now go to and deploy the policy to assigned devices. The changes are not active until you deploy them. |
) for your Firewall Threat Defense device. The