interface Command Parameters
Parameter Description
hardware-id Specifies the network interface on which the command will be applied (such
as Ethernet0).
subinterface-num The subinterface identifier that will be assigned for this logical interface,
which can be between 1 and 4,294,967,293.
mapped-name In multiple-context mode, enter the mapped name if it was assigned using the
allocate-interface command.
shutdown Keyword indicating that the interface should be administratively shut down.
After you have created a subinterface on the physical interface, the subinterface must be
assigned to a VLAN. Use the VLAN command while in the subinterface to assign that
subinterface to a specific VLAN, the syntax for which is as follows:
vlan [vlan-id]
The vlan-id parameter for the vlan command specifies the VLAN identifier to be associated
with either the network or the logical interface.
Suppose that interface Ethernet0 on your Security Appliance, such as an ASA 5520, is
connected to an enterprise LAN and that you want to configure three logical interfaces on
that same physical interface for VLAN 40 through VLAN 42. The commands to accomplish
this are as follow:
pix515a(config)# interface Ethernet0.1
pix515a(config-subif)# vlan 40
pix515a(config)# interface Ethernet0.2
pix515a(config-subif)# vlan 41
pix515a(config)# interface Ethernet0.3
pix515a(config-subif)# vlan 42
Managing VLANs
After you create your logical interfaces, you also need to assign the following parameters to
each logical interface:
■ Interface name
■ Security level
■ IP address
Table 11-6 interface Command Parameters
Parameter Description
hardware-id Specifies the network interface on which the command will be applied (such
as Ethernet0).
subinterface-num The subinterface identifier that will be assigned for this logical interface,
which can be between 1 and 4,294,967,293.
mapped-name In multiple-context mode, enter the mapped name if it was assigned using the
allocate-interface command.
shutdown Keyword indicating that the interface should be administratively shut down.
NOTE You do not need to assign a VLAN to the physical interface to assign logical
interfaces to an interface.