topic FWSM remove ip address from vlan interface in Network Security

FWSM remove ip address from vlan interface

rkmediacarlk — Tue, 12 Mar 2019 00:52:36 GMT

What is the correct way to remove an IP address from one of the interfaces bound to a FWSM? I seem to recall reading a warning that executing the no ip address command would remove ALL IP addresses configured on the FWSM, however, I have not been able to find that anywhere I look now. Perhaps this was an issue with 2.x versions and has been fixed since 3.x?

FWSM remove ip address from vlan interface

Jouni Forss — Sat, 26 Jan 2013 13:17:10 GMT

Hi,

Cant say I have ever had a problem in removing an IP address from a Vlan interface on a FWSM. I dont know why it would cause any problems.

Only warnings I can remember the Cisco firewalls giving me is if I have an DHCP server configured on the firewall and I try to remove the IP address of the interface. (Or atleast this is how I remember it)

What is your exact software level of the FWSM at the moment?

I would first read the Command Reference for that specific software level to see how that command behaves in your software level. It usually lists the usage guidelinse too.

- Jouni

Re: FWSM remove ip address from vlan interface

rkmediacarlk — Sat, 26 Jan 2013 20:41:21 GMT

Thanks for the reply. We have a couple of clusters, some running 2.2(3) and others running 4.1(8).

Found the following in the 4.0 Command Reference

To remove the IP address, use the no form of this command.

And this in the 2.3 Command Reference

To remove the standby interface IP address, set the sby_ip_addr to zero. To remove the IP address, set the IP address to zero and the mask to 255.255.255.255.

It was the clear ip command that clears all interface IP addresses

I totally forgot about the command reference guides, thanks for the reminder

FWSM remove ip address from vlan interface

Jouni Forss — Sat, 26 Jan 2013 20:47:14 GMT

Hi,

It does seem that the operation of FWSM at 2.2 is different from the newer versions. I have only used 3.2 - 4.0

Heres a link to the 2.2 Command Reference. It should also take you to the "ip address" command

http://www.cisco.com/en/US/docs/security/fwsm/fwsm22/command/reference/gl.html#wp1026920

Check the "Usage Guidelines" section.

- Jouni