||Next to the device you want to modify, click the edit icon
In a multidomain deployment, if you are not in a leaf domain,
the system prompts you to switch.
||Next to the interface you want to modify, click the edit icon
Routed to display the routed interface options.
||If you want to apply a security zone, do one of the following:
||If you want to specify a virtual router, do one of the
- Choose an existing virtual
router from the
New to add a
new virtual router;
Adding Virtual Routers.
Enabled check box to allow the routed interface to
handle traffic. If you clear the check box, the interface becomes disabled so
that users cannot access it for security purposes.
Mode drop-down list, choose an option to designate
the link mode, or choose
Autonegotiation to specify that the interface is
configured to auto negotiate speed and duplex settings.
are available only for copper interfaces.
appliances do not support half-duplex options.
MDI/MDIX drop-down list, choose an option to
designate whether the interface is configured for MDI (medium dependent
interface), MDIX (medium dependent interface crossover), or Auto-MDIX.
Normally, MDI/MDIX is set to Auto-MDIX, which automatically
handles switching between MDI and MDIX to attain link.
settings are available only for copper interfaces.
MTU field, choose a maximum transmission unit (MTU),
which designates the largest size packet allowed.
The MTU is the
Layer 2 MTU/MRU and not the Layer 3 MTU.
The range of MTU values can
vary depending on the model of the managed device and the interface type.
Changing the highest MTU value among all non-management interfaces on the device restarts the Snort process when you deploy configuration changes, temporarily interrupting traffic inspection. Inspection is interrupted on all non-management interfaces, not just the interface you modified. Whether this interruption drops traffic or passes it without further inspection depends on the model of the managed device and the interface type. See Snort® Restart Traffic Behavior for more information.
ICMP, check the
Enable Responses check box to allow the interface to
respond to ICMP traffic such as pings and traceroute.
IPv6 NDP, check the
Enable Router Advertisement check box to enable the
interface to broadcast router advertisements.
||To add an IP address, click
Address field, enter the routed interface’s IP
address and subnet mask using CIDR notation.
You cannot add network and broadcast addresses, or the static
MAC addresses 00:00:00:00:00:00 and FF:FF:FF:FF:FF:FF.
You cannot add identical IP addresses, regardless of subnet
mask, to interfaces in virtual routers.
||If your organization uses IPv6 addresses and you want to set the
IP address of the interface automatically, check the
Address Autoconfiguration check box next to the
Type, choose either
for more information.
To edit an IP address, click the edit icon ().
To delete an IP address, click the delete icon ().
When adding an IP address to a routed interface of a
7000 or 8000 Series
device in a high-availability pair, you must add a corresponding IP address to
the routed interface on the high-availability pair peer.
||To add a static ARP entry, click
IP Address field, enter an IP address for the static
MAC Address field, enter a MAC address to associate
with the IP address. Use the standard address format of six groups of two
hexadecimal digits separated by colons (for example, 01:23:45:67:89:AB).
To edit a static ARP entry, click the edit icon ().
To delete a static ARP entry, click the delete icon ().