Changing VLAN on ASA sub-interface

johnlloyd_13 — Fri, 21 Feb 2020 17:35:38 GMT

hi,

just a sanity check, i just need to change or update the VLAN on the ASA 'outside' interface and add/allow the VLAN on the switch trunk.

it's troublesome to negate the whole subif since the nameif and its route, NAT related configs will be removed and need to add them back.

just to make things simple, do i just straightforward overwrite on the ASA subif with the vlan 150 command?

SW:

interface GigabitEthernet1/0/1
switchport trunk allowed vlan add 100

switchport trunk allowed vlan remove 150

ASA:

interface GigabitEthernet0/1.150

vlan 100 <<< PREVIOUSLY VLAN 150
nameif outside
security-level 0

Re: Changing VLAN on ASA sub-interface

Marius Gunnerud — Tue, 15 Oct 2019 20:06:18 GMT

Correct, just overwrite the old vlan 150 with vlan 100.

johnlloyd_13 — Tue, 15 Oct 2019 22:11:42 GMT

thanks!