topic Re: Changing a sub-interface to physical in Network Security

Changing a sub-interface to physical

leesutcliffe — Mon, 11 Mar 2019 18:55:57 GMT

Hi,

I wondering what is the best practice when changing a sub interface to physical interface?

Currently my "Outside" interface on an ASA 5550 (8.2) is assigned to a sub-interface. Due to a VoIP project it is a requirement that a priority queue is configured on the ASA so that voice traffic can be prioritised. As I can't add a prioity queue to a VLAN interface I will have to move the outside interface from a sub-interface to the physical interface.

Providing the ACLs are still assigned to the named interface "Outside", am I right in assuming that once the interface has been reconfigured, the ACLs will work as before?

eg:

access-group acl_name in interface Outside

Thanks in advance

Re: Changing a sub-interface to physical

Dan-Ciprian Cicioiu — Mon, 18 Oct 2010 15:57:33 GMT

Hello Lee,

As far as i know , you must re-apply the access-list on the interface , and also any NAT configuration regarding this deleted interface.

HTH

Dan

Re: Changing a sub-interface to physical

Kureli Sankar — Mon, 18 Oct 2010 18:35:42 GMT

Dan is right. Any line ssh, nat, acl, aaa - that refer to the interface name needs to be added again after you re-configure the interface.

-KS

Re: Changing a sub-interface to physical

leesutcliffe — Tue, 19 Oct 2010 09:05:21 GMT

Thanks for the responses, now I know what I have to write in the change request!

Cheers

Lee