topic there should be a separate in Network Security

ASA 9.1 Context mode, remove subinterface

wilson_1234_2 — Tue, 12 Mar 2019 07:49:51 GMT

Cisco Adaptive Security Appliance Software Version 9.1(7)4 <context>
Device Manager Version 7.1(1)52

I have an ASA5585 with multiple contexts. Each context has it's own interface. One parent interface holds multiple DMZs with their own VLAN and subinterface.

I am wanting to delete one of the subinterfaces due to it being decommissioned, without disrupting any other active subinterface or customer.. In ASDM, the "delete" function is greyed out fo all subinterfaces.

I didn't just want to remove the subinterface via command line because I figured the delete function was greyed out for a reason.

Can the subinterface be safely removed? And why is "delete" greyed out in ASDM?

hi,

johnlloyd_13 — Thu, 02 Jun 2016 06:15:43 GMT

hi,

are you in 'System' context when deleting the said subinterface?

No,

wilson_1234_2 — Thu, 02 Jun 2016 12:04:28 GMT

No,

I was in the context that the subinterface was in.

I did notice when looking at trying to add a subinterface in that context, that the physical interface drop down list was not present.

Does this mean to add a subinterface in context mode you have to be in the system context as well?

yes, the add/delete of

johnlloyd_13 — Thu, 02 Jun 2016 13:57:48 GMT

yes, the add/delete of subinterface is done on the system context.

just click on system > interfaces > delete > apply. see attached photo.

Ok, in ASDM, I am attached to

wilson_1234_2 — Thu, 02 Jun 2016 14:02:03 GMT

Ok, in ASDM, I am attached to each context separately, how did you attach as you have done here so you see system and the different contexts?

there should be a separate

johnlloyd_13 — Thu, 02 Jun 2016 14:13:02 GMT

there should be a separate 'system' context, which kinda 'root' of all security contexts.

it's all the way up the contexts, just double click on it.

if you still don't see it, i suggest doing it via CLI:

changeto system

context CONTEXT-A

allocate-interface <INTERFACE> <<< TO ADD

no allocate-interface <INTERFACE> <<< TO DELETE

There is a separate system

wilson_1234_2 — Thu, 02 Jun 2016 14:16:12 GMT

There is a separate system context and I can get to it via command line by changto, but I am connecting to the individual contexts in ASDM by going to their individual IP Addresses.

You have made a connection to the root device in ASDM, that is what I don't see how you did it.

like i said, you can't edit

johnlloyd_13 — Thu, 02 Jun 2016 14:23:22 GMT

like i said, you can't edit interfaces (add or delete) on the security context itself. it needs to be done on the 'system' context.

if you're able to do a changeto system, then you can edit subinterfaces from there. see the sample from my previous post.

see helpful link for ASA context CLI:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/ha_contexts.html#30347

Yes, I got that. I was

wilson_1234_2 — Thu, 02 Jun 2016 14:29:00 GMT

Yes, I got that. I was wondering how you got ASDM to show System and all the different contexts in the device list.

I am connecting to the different contexts by pointing ASDM to each individual context by their logical ip addresses.

You have connected to https://localhost:5500, which shows system and the contexts under it.

oh that, i'm just using ASDM

johnlloyd_13 — Thu, 02 Jun 2016 14:32:07 GMT

oh that, i'm just using ASDM in demo mode 🙂

i'm not a big fan of it and do mostly everything in ASA via CLI.

Ok, but how did you attach to

wilson_1234_2 — Thu, 02 Jun 2016 14:35:02 GMT

Ok, but how did you attach to the ASA with ASDM to show system and the context list?

Did you connect to an IP Address?

If so, which one?

you use the management IP

johnlloyd_13 — Thu, 02 Jun 2016 14:39:16 GMT

you use the management IP address configured under the 'admin' context.

Thanks man, I appreciate the

wilson_1234_2 — Thu, 02 Jun 2016 15:15:09 GMT

Thanks man, I appreciate the prompt responses.

Got one more question for you

wilson_1234_2 — Thu, 02 Jun 2016 16:11:58 GMT

Got one more question for you:

Earlier you said "just click on system > interfaces > delete > apply"

When you select the individual interface and right click, is "delete" greyed out?

It looks like I might be able to delete by clicking on 'delete" in the right hand pane, but when I right click on the interface, "delete" is greyed out in the system context.

yes, it's 'greyed out' when i

johnlloyd_13 — Fri, 03 Jun 2016 01:19:42 GMT

yes, it's 'greyed out' when i also do a right click.

you can delete by clicking on the 'delete' button on the right-hand side of ASDM.

thanks for rating my posts!