topic secondary ip address configuration in Network Security

secondary ip address configuration

pratap — Mon, 11 Mar 2019 13:15:50 GMT

I have pix 515 E and i want to configure secondary ip address on inside interface of pix 515 E,is it possible to configure secondary ip address on inside interface of pix 515E?

Re: secondary ip address configuration

itadmin — Thu, 17 Jul 2008 05:50:21 GMT

I don't believe it is possible.

You can however create a static NAT rule on the inside interface so it seems to have more than one IP address.

What is the purpose of this?

Re: secondary ip address configuration

dhananjoy chowdhury — Thu, 17 Jul 2008 06:17:58 GMT

You can create subinterfaces on the inside Interface. Put the two subnets in two different VLAN's.

Re: secondary ip address configuration

5220 — Thu, 17 Jul 2008 06:22:37 GMT

The ASA interface will be configured as trunk, while for each VLAN you will configure subinterfaces. Assign one VLAN ID per interface.

The IP of the ASA on each subinterface will be the default gateway for the devices on that subnet.

interface GigabitEthernet0/1

description "Trunk Connectivity with SW"

speed 100

duplex full

no nameif

no security-level

no ip address

interface GigabitEthernet0/1.100

vlan 100

nameif VLAN100

security-level 80

ip address xxxxxxx

interface GigabitEthernet0/1.200

vlan 200

nameif VLAN200

security-level 70

ip address xxxxxxx

interface GigabitEthernet0/1.300

vlan 300

nameif VLAN300

security-level 60

ip address xxxxxxx

An example with VLANs and remote access VPNs:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806ab788.shtml

Please rate if this helped.

Regards,

Daniel