Cisco Cisco Firepower Management Center 4000

Admin/Network Admin

Select 

.

The Device Management page appears.

Next to the device where you want to add the routed interface, click the edit icon (

).

The Interfaces tab for that device appears.

Click 

.

The Add Interface pop-up window appears.

Click 

 to display the routed interface options.

From the 

 drop-down list, select the physical interface where you want to add the logical 

interface.

In the 

 field, type a tag value that gets assigned to inbound and outbound traffic on this interface. 

The value can be any integer from 1 to 4094.

Optionally, from the 

 drop-down list, select an existing security zone or select 

 to add a 

new security zone.

Optionally, from the 

 drop-down list, select an existing virtual router or select 

 to add a 

new virtual router.

Note that if you add a new virtual router, you must configure it on the Device Management page (

) after you finish setting up the routed interface. See 

.

Select the 

 check box to allow the routed interface to handle traffic.

If you clear the check box, the interface becomes disabled and administratively taken down. If you 
disable a physical interface, you also disable all of the logical interfaces associated with it.

In the 

 field, type a maximum transmission unit (MTU), which designates the largest size packet 

allowed. Note that the MTU is the Layer 2 MTU/MRU and not the Layer 3 MTU.

The range within which you can set the MTU can vary depending on the FireSIGHT System device 
model and interface type. See 

 for more information.

Next to 

, select the 

 check box to communicate updates or error information to other 

routers, intermediary devices, or hosts.

Next to 

, select the 

 check box to enable the interface to broadcast 

router advertisements.

To add an IP address, click 

.

The Add IP Address pop-up window appears.

In the 

 field, type the IP address in CIDR notation. Note the following:

You cannot add network and broadcast addresses, or the static MAC addresses 00:00:00:00:00:00 
and FF:FF:FF:FF:FF:FF.

You cannot add identical IP addresses, regardless of subnet mask, to interfaces in virtual routers.

Optionally, if your organization uses IPv6 addresses, next to the 

 field, select the 

 check box to set the IP address of the interface automatically.

For 

, select either Normal or SFRP. 

For SFRP options, see 

 for more information.