Cisco Cisco Firepower Management Center 4000

The Edit Interface pop-up window appears.

Click 

to display the routed interface options.

Optionally, from the 

 drop-down list, select an existing security zone or select 

 to add a 

new security zone.

Optionally, from the 

 drop-down list, select an existing virtual router or select 

 to add a 

new virtual router.

Note that if you add a new virtual router, you must configure it on the Virtual Routers tab of the Device 
Management page (

) after you set up the routed interface. See 

Select the 

 check box to allow the routed interface to handle traffic.

If you clear the check box, the interface becomes disabled so that users cannot access it for security 
purposes.

From the 

 drop-down list, select an option to designate the link mode or select 

 to 

specify that the interface is configured to auto negotiate speed and duplex settings. Note that mode 
settings are available only for copper interfaces.

Interfaces on 8000 Series appliances do not support half-duplex options.

From the 

 drop-down list, select an option to designate whether the interface is configured for 

MDI (medium dependent interface), MDIX (medium dependent interface crossover), or Auto-MDIX. 
Note that MDI/MDIX settings are available only for copper interfaces.

Normally, MDI/MDIX is set to Auto-MDIX, which automatically handles switching between MDI and 
MDIX to attain link.

In the 

 field, type a maximum transmission unit (MTU), which designates the largest size packet 

allowed. Note that the MTU is the Layer 2 MTU/MRU and not the Layer 3 MTU.

The range within which you can set the MTU can vary depending on the FireSIGHT System device 
model and interface type. See 

 for more information.

Next to 

, select the 

 check box to allow the interface to respond to ICMP traffic such 

as pings and traceroute.

Next to 

, select the 

 check box to enable the interface to broadcast 

router advertisements.

To add an IP address, click 

.

The Add IP Address pop-up window appears.

In the 

 field, type the routed interface’s IP address and subnet mask using CIDR notation. Note 

the following:

You cannot add network and broadcast addresses, or the static MAC addresses 00:00:00:00:00:00 
and FF:FF:FF:FF:FF:FF.

You cannot add identical IP addresses, regardless of subnet mask, to interfaces in virtual routers.

Optionally, if your organization uses IPv6 addresses, next to the 

 field, select the 

 check box to set the IP address of the interface automatically.

For 

, select either Normal or SFRP. 

For SFRP options, see 

 for more information.

Click 

.