topic Cisco ASA 5506-X in Network Security

Cisco ASA 5506-X

Felix.Wol — Tue, 12 Mar 2019 07:41:40 GMT

Hello,

I am working with an Cisco ASA 5506-X and I am trying to configure a third interface card. Previously I worked with an 5505 where I could configure a third interface card with basis license by restricting traffic flow.

I tried it by using asdm as well as using console. I always get the following error:

[OK] Interface GigabitEthernet1/3
Interface GigabitEthernet1/3
[ERROR] no forward interface GigabitEthernet1/2

no forward interface GigabitEthernet1/2
^
ERROR: % Invalid input detected at '^' marker.

[OK] nameif inside_2
[OK] ip address 192.168.2.1 255.255.255.0

How can I enable this option or was it removed by cisco?

I read switching is not possible with this device as it is with the 5505. Is this right?

And if it's not possible to restrict traffic flow and switching as well is disabled.....how can I use my ports without buying a new license?

Thanks for your help.

Felix

1) You don't need the

Karsten Iwen — Tue, 03 May 2016 07:46:11 GMT

1) You don't need the "forward interface" any more and it's removed. You can communicate between all your interfaces and you use ACLs to restrict the traffic.

2) Sadly, there is no switchport any more. Probably a feature that many admins miss for setups like home-offices or small-offices. As long as Cisco doesn't add any functionality for that, you have to use an external switch for that. Any small unmanaged switch will do the job.

3) No license for that, it's just config (ACLs) or not available (switching).

but when i use a base license

Felix.Wol — Tue, 03 May 2016 15:10:19 GMT

but when i use a base license and Cisco asa 5506-x, I can only use two ports of my device. Right? Or do I misunderstand something?

No, this is not a restriction

Karsten Iwen — Tue, 03 May 2016 15:24:10 GMT

No, this is not a restriction of the Base-5506-X. There are some restrictions, but not for the amount of interfaces.

Then I don't understand why I

Felix.Wol — Tue, 03 May 2016 15:34:38 GMT

Then I don't understand why I get an error message,saying that I cannot configure a third interface when I try to. Is it a known bug?

Well, I can configure one. But when I want to see the interface configuration with "edit", I get this message and I am not able to do any further configuration.

Which ASDM are you using?

Karsten Iwen — Tue, 03 May 2016 15:41:24 GMT

Which ASDM are you using? Whenever something "strange" happens in the GUI, installing a newer ASDM can be the solution.

Try configuring the interfaces in CLI and look if it works there.

ASDM 7.5(1)...

Felix.Wol — Wed, 04 May 2016 06:32:57 GMT

ASDM 7.5(1)...

My Firewalls rules seem to be working right and I don't have any problems to edit my interfaces using CLI.

This is kind of strange. But when there is no interface restriction, I will update ASDM. If the error still exists I will live with it.

Thanks for your help. It really helped me