topic Firewall Interface for migration in Network Security

Firewall Interface for migration

Tzy Chun Chong — Tue, 12 Mar 2019 06:18:46 GMT

Hi Team,

My customer using ASA5510 firewall and they'll have Internet(outside) interface migration, i need to bring up the secondary internet now before the migration. I intend to use available interface but found license is limited to max 4 interface. We found the managemet interface is actually not in-use. All the access is actually target to inside interface. My intention is to disable the mgmt0/0 interface and enable the Eth0/3 interface.

I'm not sure what's the procedure to do this, can i just shutdown or clear the config in management0/0 interface and start the Eth0/3 configuration? Guess is not simple like that?

0: Ext: Ethernet0/0 : address is 0015.c695.dafc, irq 9
1: Ext: Ethernet0/1 : address is 0015.c695.dafd, irq 9
2: Ext: Ethernet0/2 : address is 0015.c695.dafe, irq 9
3: Ext: Not licensed : irq 9
4: Ext: Management0/0 : address is 0015.c695.dafb, irq 11
5: Int: Not licensed : irq 11
6: Int: Not licensed : irq 5

Licensed features for this platform:
Maximum Physical Interfaces : 4
Maximum VLANs : 10

Pls advice, I will vote any helpful threads. Thanks.

You really never updated your

Karsten Iwen — Wed, 22 Jul 2015 07:20:18 GMT

You really never updated your customers firewall in the last ~10 years?

This interface-restriction was lifted in version 7.2(2) in 2006.

Hi Karsten,I'm just join less

Tzy Chun Chong — Wed, 29 Jul 2015 01:04:05 GMT

Hi Karsten,

I'm just join less than 1 year and I'm not sure the history.

I can see the firewall current version is 7.2(1).

Meaning i just need the OS upgrade and the rest of physical interface should be workable? Any document reference for this?

Pls advice, I will vote for helpful reply. thanks.

I got the answer, thanks.http

Tzy Chun Chong — Wed, 29 Jul 2015 03:51:13 GMT

I got the answer, thanks.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa80/configuration/guide/conf_gd/license.html#wp1142379

Increased interfaces for the Base license on the ASA 5510

7.2(2)

For the Base license on the ASA 5510, the maximum number of interfaces was increased from 3 plus a management interface to unlimited interfaces.