Changing VLAN on ASA sub-interface

[johnlloyd_13]

hi,

just a sanity check, i just need to change or update the VLAN on the ASA 'outside' interface and add/allow the VLAN on the switch trunk.

it's troublesome to negate the whole subif since the nameif and its route, NAT related configs will be removed and need to add them back.

just to make things simple, do i just straightforward overwrite on the ASA subif with the vlan 150 command?

SW:

interface GigabitEthernet1/0/1
 switchport trunk allowed vlan add 100

 switchport trunk allowed vlan remove 150

ASA:

interface GigabitEthernet0/1.150

 vlan 100     <<< PREVIOUSLY VLAN 150
 nameif outside
 security-level 0

 <IP ADD SM>

[Marius Gunnerud · Accepted solution]

Correct, just overwrite the old vlan 150 with vlan 100.

[johnlloyd_13]

thanks!