topic Thanks Marvin in Network Security

Multiple ip address on an interface

bhushit17 — Tue, 12 Mar 2019 07:05:23 GMT

How can I assign another ip address to an interface on ASA5580, actually my ip range (172.16.31.0/24) already got exhausted, and I have neighboring range in use elsewhere so want to assign different range(172.16.41.0/24) for other hosts in that zone.

In switches we can assign another address with secondary keyword, but its not possible in ASA.

How can the same functionality be had on an ASA.

Thanks in Advance

Hi,

Rishabh Seth — Fri, 01 Jan 2016 10:51:23 GMT

Hi,

On ASA you cannot assign multiple IP addresses on an interface.

In case you are aware of the internal resources which will be using the new address, then you can create NAT statements using the new IP address.

Hope it helps!!!

Thanks Rishabh for your

bhushit17 — Sat, 02 Jan 2016 12:03:43 GMT

Thanks Rishabh for your inputs,

NAT or scrapping whole ip rangeand replacing with new one seems to be only options left.

Thanks again.

Or route the new subnets via

Marvin Rhoads — Sat, 02 Jan 2016 18:27:07 GMT

Or route the new subnets via a downstream device connected to the original zone.

That requires neither readdressing nor new NAT policies.

Thanks Marvin

bhushit17 — Thu, 07 Jan 2016 13:03:02 GMT

Thanks Marvin

I have to plan a downstream device with routing capabilities for this option, currently I have only servers in that zone.