topic Hi MArvin, ASA is 5520 so it in Network Security

Removing Vlan from ASA

mahesh18 — Tue, 12 Mar 2019 04:04:32 GMT

Hi Everyone,

I need to remove vlan 20 from ASA 5520 which is in Active/Standby Mode.

Currently config from Active ASA

interface GigabitEthernet0/0.3
description Visitor
vlan 20
nameif dmz_visitor
security-level 4
ip address 192.168.50.1 255.255.255.0 standby 192.168.50.2

Regards

MAhesh

Mahesh,Normally we would

Marvin Rhoads — Mon, 14 Apr 2014 17:26:23 GMT

Mahesh,

Normally we would remove the complete subinterface (gi0/0.3 in your example) from global configuration mode:

no int gi0/0.3

The interface mode command "vlan 20" would not normally be removed but if you instead want to change it, just entering a new "vlan __" command (in interface configuration mode) will replace the existing one.

Hi MArvin, ASA is 5520 so it

mahesh18 — Tue, 15 Apr 2014 00:03:25 GMT

Hi MArvin,

ASA is 5520 so it does not have int vlan 20.

Seems no int gi0/0.3 should remove everything including vlan 20 right?

Regards

MAhesh

I did not mean it has

Marvin Rhoads — Tue, 15 Apr 2014 12:12:31 GMT

I did not mean it has "interface vlan 20" but rather that "vlan 20" is a command that is only valid when in (sub)interface configuration mode

In any case - that's correct: just remove the subinterface which includes the "vlan 20" command within it.

Many thanks Marvin. Best

mahesh18 — Tue, 15 Apr 2014 12:39:03 GMT

Many thanks Marvin.

Best Regards

MAhesh