topic Sorry my friend, I don't get in Network Security

ASA 5510 interface migration

fborelli07 — Tue, 12 Mar 2019 05:57:02 GMT

Hello people!

I have the next issue.

We have bought a SSM 4 Gigabit module for our ASA 5510. So now I want to migrate an interface that now is "Eth0/0.10" to the new SFP "Gi1/0.10".

Question is: what is the right way to do it?

I have many features running on it like IPSec tunnels, Anyconnect, internet PAT, static NATs. What about ACLs?

Wich of these depends on the interface name? because it will have the same one of course.

Will I have to point the ACLs to the new interface? something else as well? As most of our services are through internet, this interface is the one with the most ACL entries.

Tahanks to everyone!

Hi,Easiest way would be to

Vibhor Amrodia — Fri, 15 May 2015 14:12:30 GMT

Hi,

Easiest way would be to change the Physical interface offline and not on the ASA device as you would not be able to configure two interfaces with same nameif. The nameif will be the same and rest of the configuration would not be affected.

Thanks and Regards,

Vibhor Amrodia

Sorry my friend, I don't get

fborelli07 — Fri, 15 May 2015 14:29:29 GMT

Sorry my friend, I don't get you.

I'm not talking about the physical change of the module.. right?

What do you mean by change the interface offline?

Thanks!

Hi,I meant the Interface

Vibhor Amrodia — Fri, 15 May 2015 14:54:58 GMT

Hi,

I meant the Interface module itself.

If the modules on Slot 1 is SFP , you would only need to add this command:-

media-type sfp

Rest I meant this:-

Ex:-

Interface g0/3

nameif inside

ip address 3.3.3.3 255.255.255.0

no sh