topic Re: Firewall Sub Interfaces in Network Security

Firewall Sub Interfaces

andy.winford — Mon, 11 Mar 2019 20:47:35 GMT

I have created sub interfaces in the past and applied access-lists to each sub interface. However, is it possible to apply a single access-list to the parent interface with rules referencing multiple sub interfaces in that access-list?

Thanks in advanced...

Andy

Firewall Sub Interfaces

Allen P Chen — Mon, 20 Jun 2011 20:25:55 GMT

Hello,

What software version is your ASA running?

In software version 8.3 and above, you can apply a "global" access-list, which will apply to all interfaces on the ASA. Here is the reference guide for this command:

http://www.cisco.com/en/US/docs/security/asa/asa83/command/reference/a1.html#wp1597389

Unfortunately, there is no command available to apply an access-list to the physical interface and have it cascade down to all logical interfaces under the physical interface.

Hope this helps.

Re: Firewall Sub Interfaces

andy.winford — Mon, 20 Jun 2011 20:26:48 GMT

Thanks buddy.

Andy Winford

CISSP, CCSP

Systems Engineer (SE), Network Infrastructure & Services Practice

United Data Technologies