topic Move Network from ASA interface in Network Security

Move Network from ASA interface

brentz — Tue, 12 Mar 2019 03:25:04 GMT

We have a network that has an interface on our ASA. This network will be moving to a new location and will now be connected to one of our regular layer 3 switches. What needs to be done on the ASA to disable this network and allow the correct routes to be in the ASA to allow access from the new location?

Thanks

Brent

Move Network from ASA interface

Jouni Forss — Sat, 04 Jan 2014 14:46:31 GMT

Hi,

Well if you have the network configured on one of your interfaces then you naturally need to configure a new network for that link and take this into account in the "route" configurations on the ASA and in the "ip route" configurations on the other devices forwarding traffic to it.

There will probably be some other configurations that need to be changed to use the new interface network/subnet also depending on if the interface just links to another router or if its directly connected to a host network through a switched network.

- Jouni

Move Network from ASA interface

Marvin Rhoads — Sat, 04 Jan 2014 14:48:52 GMT

You would remove any access-lists and NAT rules that reference the interface and then unconfigure it completely (remove the nameif, ip address, security level assigned and, if monitoring as part of an HA pair, the monitor command).

Once the ASA no longer knows about the network as connected, you would need to check your existing routing processes or static route statements to ensure reachability of the network.

If you could provide the configuration we could provide more explicit instructions.

Re: Move Network from ASA interface

Oscar Castillo — Sat, 04 Jan 2014 14:58:12 GMT

Remove the vlan from the ports, #shut, remove routings.

Make sure inside services, management configuration don't get affected by removing sources.

Regards,
Oscar

Sent from Cisco Technical Support iPhone App