topic Re: Cisco ASA - changing LAN port in Network Security

Cisco ASA - changing LAN port

LovejitSingh130013 — Fri, 26 Mar 2021 23:20:39 GMT

Hello Guys

I have ASA working with having CRC errors on LAN interface and Cisco TAC said move the port to another.

To assign the same IP to another available interface, I have to delete the config on current Interface which will also delete NAT or ACLs associated with interface.

what else should be deleted?

Whats the best way to do it?

I am planning to take fresh backup of running config and change the interface and readd the missing(deleted) config.

Thanks

Re: Cisco ASA - changing LAN port

johnlloyd_13 — Sat, 27 Mar 2021 02:30:20 GMT

hi,

did you try to change the cable and switch port instead?

try to isolate on those first before moving L3 IP/config to another ASA port.

Re: Cisco ASA - changing LAN port

balaji.bandi — Sat, 27 Mar 2021 10:26:16 GMT

Maybe check with TAC, TAC meant to say move the port on the switch side?

i will try this before i change at the ASA side.

1. change the patch lead with a new one.

2. configure a new port on the switch and move the ASA connection to the new port and test it.

Re: Cisco ASA - changing LAN port

LovejitSingh130013 — Sat, 27 Mar 2021 19:59:56 GMT

Hello Guys,

I already tried changing cable and worked with TAC and they said it can be bad bad interface on ASA.

they asked me trying changing interface to another.

My question was regarding the procedure of changing interface, like if I delete the current LAN interface config as it is needed to configure same IP on other interface, what else will need reconfigured like NAT, ACLs etc?

Re: Cisco ASA - changing LAN port

Rob Ingram — Sat, 27 Mar 2021 20:13:55 GMT

Hi @LovejitSingh130013

Yes, when you clear the configuration of an interface some configuration is removed. NAT is removed (if it references the interface) and the access-group command is removed, the ACL remains (certainly on 9.12 anyway). I expect the same if crypto is enabled on an interface, you'll have to re-enable that.

I'd recommending taking a backup of the configuration and expect to paste in the configuration for anything that referenced the interface you've reconfigured.

HTH

Re: Cisco ASA - changing LAN port

balaji.bandi — Sat, 27 Mar 2021 21:12:12 GMT

as suggested the interface-related configuration will be gone, so make the new configuration ready with a new interface, by taking the old backup config, replace with new interface, in the maintenance window, change the interface and apply the new interface-related config.

Re: Cisco ASA - changing LAN port

LovejitSingh130013 — Mon, 19 Apr 2021 16:13:31 GMT

Hello @Rob @balaji.bandi

I changed port successfully, Only issue I encounter was, I have to readd the radius server key.