topic Re: Cisco ASA - ERROR: Cannot change a shared interface in Network Security

Cisco ASA - ERROR: Cannot change a shared interface

edwardonelife — Fri, 21 Feb 2020 15:38:24 GMT

Hi,

Im trying to configure a TenGig interface as a failover/link interface on a ASA5585-SSP-10 but it gives me the error "Cisco ASA - ERROR: Cannot change a shared interface". A 1G interface works well.

What could be the issue?

Re: Cisco ASA - ERROR: Cannot change a shared interface

Bogdan Nita — Tue, 17 Apr 2018 07:34:41 GMT

Are you running multiple contexts ?

Is the interface allocated to more than one context ?

Re: Cisco ASA - ERROR: Cannot change a shared interface

edwardonelife — Tue, 17 Apr 2018 08:48:37 GMT

Yes, its in multiple context but the interface is not assigned to any
context as its for failover.

Re: Cisco ASA - ERROR: Cannot change a shared interface

Ajay Saini — Wed, 18 Apr 2018 08:23:23 GMT

Hello,

A couple of things you can check:

1. check if there is any configuration on the 10g Interface. If there is, we need to remove since the same interface cant be used for both data and failover link:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCui25013/?rfs=iqvred

2. Make sure you have license enabled on ASA 5585 for 10G interface.

HTH
AJ

Re: Cisco ASA - ERROR: Cannot change a shared interface

edwardonelife — Wed, 18 Apr 2018 08:38:21 GMT

Hi,

!
interface TenGigabitEthernet0/8
description "Failover"
!

ASA(config)# failover lan interface LAN-FO ten0/8
Cannot change a shared interface
ASA(config)#

License is enabled;

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 1024 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
Carrier : Disabled perpetual
AnyConnect Premium Peers : 5000 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 5000 perpetual
Total VPN Peers : 5000 perpetual
AnyConnect for Mobile : Enabled perpetual
AnyConnect for Cisco VPN Phone : Enabled perpetual
Advanced Endpoint Assessment : Enabled perpetual
Shared License : Disabled perpetual
Total TLS Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
10GE I/O : Enabled perpetual
Cluster : Enabled perpetual

Re: Cisco ASA - ERROR: Cannot change a shared interface

Ajay Saini — Wed, 18 Apr 2018 09:42:17 GMT

Hello,

Can you please try to remove the description from the interface in question, shut it down and then try to make it failover interface.

Also, make sure this interface is not used in any context through subinterface or port-channel etc.

HTH
AJ

Re: Cisco ASA - ERROR: Cannot change a shared interface

edwardonelife — Wed, 18 Apr 2018 09:51:31 GMT

Same thing, not working

Re: Cisco ASA - ERROR: Cannot change a shared interface

Ajay Saini — Wed, 18 Apr 2018 10:23:06 GMT

Hello,

Can you please attach output of below from system context

show running-config all context