topic Converting interface to different subinterfaces on ASA in Network Security https://community.cisco.com/t5/network-security/converting-interface-to-different-subinterfaces-on-asa/m-p/2121127#M395681 <HTML><HEAD></HEAD><BODY><P>The NAT rules will disappear because the interface will disappear. The rule base should stay in place but it will no longer be applied to the interface.</P></BODY></HTML> Tue, 13 Nov 2012 15:41:28 GMT Collin Clark 2012-11-13T15:41:28Z Converting interface to different subinterfaces on ASA https://community.cisco.com/t5/network-security/converting-interface-to-different-subinterfaces-on-asa/m-p/2121126#M395680 <P>Hi,</P><P></P><P>I have a cluster with cisco 5550 asa's.</P><P></P><P>I need to have mulpti new DMZ zones on our firewall, and since we already have 8 interfaces in use, I need to swap one interface from one DMZ to multiple DMZ's using subinterfaces...</P><P></P><P>My question is now, what will happen with the current rule-base and NAT rules configured on this particular interface during the conversion to subinterfaces ?</P><P>Anyone any experience ? or a best practice to do this ?</P><P></P><P>We have +70 NAT rules for this interface and +120 rules in our rulebase....</P><P></P><P>Karl</P> Tue, 12 Mar 2019 00:22:37 GMT https://community.cisco.com/t5/network-security/converting-interface-to-different-subinterfaces-on-asa/m-p/2121126#M395680 karl.dorme 2019-03-12T00:22:37Z Converting interface to different subinterfaces on ASA https://community.cisco.com/t5/network-security/converting-interface-to-different-subinterfaces-on-asa/m-p/2121127#M395681 <HTML><HEAD></HEAD><BODY><P>The NAT rules will disappear because the interface will disappear. The rule base should stay in place but it will no longer be applied to the interface.</P></BODY></HTML> Tue, 13 Nov 2012 15:41:28 GMT https://community.cisco.com/t5/network-security/converting-interface-to-different-subinterfaces-on-asa/m-p/2121127#M395681 Collin Clark 2012-11-13T15:41:28Z Re:Converting interface to different subinterfaces on ASA https://community.cisco.com/t5/network-security/converting-interface-to-different-subinterfaces-on-asa/m-p/2121128#M395682 <HTML><HEAD></HEAD><BODY><P>So it will be a good idea to delete all nat config prior to make the changes to keep a clean config ?<BR /><BR /><BR />Sent from Cisco Technical Support Android App</P></BODY></HTML> Tue, 13 Nov 2012 15:58:10 GMT https://community.cisco.com/t5/network-security/converting-interface-to-different-subinterfaces-on-asa/m-p/2121128#M395682 karl.dorme 2012-11-13T15:58:10Z Re:Converting interface to different subinterfaces on ASA https://community.cisco.com/t5/network-security/converting-interface-to-different-subinterfaces-on-asa/m-p/2121129#M395683 <HTML><HEAD></HEAD><BODY><P>No need to delete them all since the only ones that will be removed are the ones associated with the interface that disappears.</P></BODY></HTML> Tue, 13 Nov 2012 18:11:46 GMT https://community.cisco.com/t5/network-security/converting-interface-to-different-subinterfaces-on-asa/m-p/2121129#M395683 Collin Clark 2012-11-13T18:11:46Z