One ASA Context - Multiple In/Out interfaces?

christopher.wood — Tue, 12 Mar 2019 07:40:33 GMT

Hello,

I have a firewall with multiple contexts. We're trying to conserve a few contexts, but wanted to get multiple VLANs into the same context. Haven't tried it before.

Current Setup looks like this:

interface GigabitEthernet0/0.1300
description Outside Interface
nameif Outside
security-level 0
ip address X.X.X.X 255.255.255.248
!
interface GigabitEthernet0/1.15
nameif Zone
security-level 80
ip address X.X.X.X 255.255.255.0

So would I be able to add:

interface GigabitEthernet0/0.1301
description Outside Interface
nameif Outside2
security-level 0
ip address X.X.X.X 255.255.255.248
!
interface GigabitEthernet0/1.16
nameif Zone2
security-level 80
ip address X.X.X.X 255.255.255.0

And then add another routing statement and another access-list for those interfaces?
Also thought I could add just a new inside VLAN and route out on the same outside VLAN?

Any thoughts or suggestions?

Thanks.

Hi,

Rishabh Seth — Fri, 06 May 2016 18:06:31 GMT

Hi,

In multiple context environment, the interfaces are created and allocated by the system context and then these interfaces will be available in respective security context for use.

Refer following link to understand and create new interfaces for use:Click here

Thanks,

Rate this post if it helps in answering your query.

topic One ASA Context - Multiple In/Out interfaces? in Network Security

One ASA Context - Multiple In/Out interfaces?

Hi,