Unable to move from interface to subinterface using contextmode on 5515-x

thomas.stern — Tue, 12 Mar 2019 06:49:14 GMT

Hi,

Long time reader, first time poster

I am moving from using an ordinary interface to subinterfaces in order to move two contexts to same physical interface. However I cannot get the config to work.

in system context:

interface GigabitEthernet0/3
!
interface GigabitEthernet0/3.1
vlan 310
!
interface GigabitEthernet0/3.2
vlan 320

..
context context1
allocate-interface GigabitEthernet0/0 B_outside
allocate-interface GigabitEthernet0/3.1 B_inside
config-url disk0:/context1.cfg
!

context context2
allocate-interface GigabitEthernet0/0 C_outside
allocate-interface GigabitEthernet0/3.2 C_inside
config-url disk0:/context2.cfg
!

in context1:

interface B_inside
nameif inside
security-level 100
ip address 192.168.11.1 255.255.255.0 standby 192.168.11.250
!

all other conf is the same as before (I readded the nats that were removed when I went to subinterfaces) and previously I could just "ping 192.168.11.5" from context1 , now I cannot. Nor do ssh tunnnels or https rules work)

Do I need to setup a switchport or something inside the context to vlan 310 , I am at a loss

ciscoasa/context1# show interface
Interface B_outside "outside", is up, line protocol is up
        MAC address **, MTU 1500
        IP address **, subnet mask 255.255.255.248
Traffic Statistics for "outside":
        4203345 packets input, 2260290490 bytes
        2849981 packets output, 1589294400 bytes
        32004 packets dropped
Interface B_inside "inside", is up, line protocol is up
        MAC address **, MTU 1500
        IP address 192.168.11.1, subnet mask 255.255.255.0
Traffic Statistics for "inside":
        0 packets input, 0 bytes
        139 packets output, 3892 bytes
        0 packets dropped

/thomas

Thomas

Jon Marshall — Mon, 02 Nov 2015 15:02:26 GMT

Thomas

Sorry to ask the obvious but have you made the port on your switch a trunk port ie. the port the ASA interface connects to.

Jon

Hi Thomas,

Akshay Rastogi — Mon, 02 Nov 2015 16:49:02 GMT

Hi Thomas,

First thing is , add 'mac-address auto' in system configuration mode.

Also check if you have made the switchport as trunk on the switch and allowed vlan 310 in that trunk.

Regards,

Akshay Rastogi

Thanks for the info, I didn't

thomas.stern — Thu, 05 Nov 2015 08:05:28 GMT

Thanks for the info, I didn't think to look outside the ASA. I was too focused on the details of the conf.

/thomas

topic Thanks for the info, I didn't in Network Security

Unable to move from interface to subinterface using contextmode on 5515-x

Thomas

Hi Thomas,

Thanks for the info, I didn't