topic Re: Virtual interface in cisco asa in Network Security

Virtual interface in cisco asa

vishnuvichu36601 — Fri, 21 Feb 2020 15:53:16 GMT

How to configure virtual interface in cisco asa 5555 and configure virtual ip for that interface?

Re: Virtual interface in cisco asa

Dennis Mink — Sat, 16 Jun 2018 17:55:12 GMT

what do you mean by virtual interface? like a vlan interface on a trunk for instance? HSRP?

Re: Virtual interface in cisco asa

vishnuvichu36601 — Sun, 17 Jun 2018 02:00:55 GMT

Just imagine interface gi 0/6 have one ip address 10.100.0.5.We need to
create a virtual ip address for that interface for nating with that ip.

Re: Virtual interface in cisco asa

Marvin Rhoads — Sun, 17 Jun 2018 05:26:38 GMT

By default all ASA 5555-X interfaces are routed (assuming the overall firewall mode is routed - the most common mode by far).

So, for a given interface, you just assign a nameif and an IP address in config-if command mode.

Re: Virtual interface in cisco asa

vishnuvichu36601 — Sun, 17 Jun 2018 05:34:55 GMT

If you have any document of configuration!please share to me?

Re: Virtual interface in cisco asa

Marvin Rhoads — Sun, 17 Jun 2018 05:44:08 GMT

The configuration guides are always a good place to start. Here are the ones for both the cli and the GUI (ASDM):

https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/general/asa-98-general-config/interface-basic.html

https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/asdm78/general/asdm-78-general-config/interface-basic.html

Re: Virtual interface in cisco asa

Dennis Mink — Sun, 17 Jun 2018 11:59:14 GMT

so if your range is for instance 10.100.0../24 and you want to add a 'virtual ip" say 10.100.0.10. then you will need to add a NAT 10.100.0.10 to whatever on your Firewall. it that simple

Re: Virtual interface in cisco asa

vishnuvichu36601 — Sun, 17 Jun 2018 12:01:55 GMT

Is there is any option there in asdm for configuring virtual ip ?

Re: Virtual interface in cisco asa

Marvin Rhoads — Sun, 17 Jun 2018 13:58:17 GMT

@vishnuvichu36601

Please see the second link in my earlier reply. It takes you straight to the ASDM interface configuration section.

Re: Virtual interface in cisco asa

Abdullo Salikhov — Thu, 21 Jun 2018 14:33:52 GMT

If you are talking about vlan interface than here is an example:
interface YOUR_INTERFACEHERE.VIRTUALNUMBER
description << BLABLA >>
vlan 1111
nameif BLABLA
security-level 0
ip address 10.1.1.1 255.255.255.0