topic removing interface from fwsm in Network Security

removing interface from fwsm

axeleratorcisco — Tue, 26 Mar 2019 00:52:11 GMT

i have the interface on disabled in my context, but i have no option to delete the interface, only edit as option

when i go to the system context i click my specific context/firewall and click edit, and scroll down to the interface i want to delete

i press delete and get the following message:

Warning

Deleting a range of interface allocations and not replacing them with new allocations for the removed interfaces before applying changes to this context will remove any context configuration that used the interfaces

Continue anyway?

I just click delete on one specific interface and below it there are more vlans/interfaces listed

Is it safe to click ok to proceed, to just delete this interface? it's still available in the context itself but it is not enabled, so it looks allright

Re: removing interface from fwsm

Jouni Forss — Wed, 25 Sep 2013 13:27:15 GMT

Hi,

I have personally never done this through the ASDM but always on the CLI.

Your Warning messages seems kind of strange as it mentions a range of interfaces. On the CLI side interface IDs that follow eachother (are consecutive or whatever the correct word is) might be mentioned on the same line but I dont think this applies to FWSM but rather ASA.

The typical way that an interface is removed from a FWSM Context on the CLI is that you go to System Context and then find the actual Security Context configuration that has this interface attached. Then you would have to go under the Security Context configuration space and remove the single interface from there which would remove the related configurations from the actual Security Context.

The command that is used to attach an interface to a Security Context is "allocate-interface Vlanxxx". The "no allocate-interface Vlanxxxx" is used to remove that interface.

But again, I am not familiar how the ASDM shows this same process on its GUI as I dont use ASDM much.

I would be very hesitant to apply any configuration changes that states its removing more interfaces that you are planning on removing.

- Jouni

removing interface from fwsm

axeleratorcisco — Wed, 25 Sep 2013 13:36:42 GMT

hi jouniforss

thanks that's what i do when i add an interface in system context mode, it uses the allocate interface command to assign the new interface to a context

i went to system context, then clicked on a specific context, then delete an interface in the middle somewhere and got this error message i mentioned

the range mention kinda scared me

removing interface from fwsm

Jouni Forss — Wed, 25 Sep 2013 16:51:13 GMT

Hi,

I am not sure how the this thing is done through ASDM so I am not sure what the ASDM GUI is actually telling the FWSM. The ASDM should have a command preview in CLI format before applying the connections IF you have set the preferences of ASDM to preview the commands

When managing the FWSM from the CLI I have had no problems regarding adding and removing interface. Not even any warning messages.

- Jouni