topic is Shared Interface possible in multiple context in ASA? in Network Security

is Shared Interface possible in multiple context in ASA?

harish.ab — Mon, 11 Mar 2019 16:01:41 GMT

Hello Guys,

I have a question from ASA multiple context concept

I have an outside interface which is connected with my outside world (with IP address 10.1.1.1 and have 3 different contexts (A,B and C). is it possible to share outside interface in each context so that a PC located in outside interface can communicate to all contexts

Thanks in advance

Re: is Shared Interface possible in multiple context in ASA?

netsec — Mon, 03 Aug 2009 06:28:06 GMT

you can map one physical interface to several contaxt interfaces. the ASA use classification to with IP adress or with MAC adress, or via NAT to send paket to the correct context.

classification work only in 1 direction.

for more info: http://www.cisco.com/en/US/docs/security/asa/asa81/config/guide/contexts.html#wp1124172

I hope it's useful

Re: is Shared Interface possible in multiple context in ASA?

suschoud — Mon, 03 Aug 2009 23:28:48 GMT

yes,to keep it simple,please add " mac-auto " command in config.the shared interface will have different mac addresses in different contexts to classify traffic.

hTh

Sushil

TAC