05-15-2015 06:59 AM - edited 03-11-2019 10:57 PM
Hello people!
I have the next issue.
We have bought a SSM 4 Gigabit module for our ASA 5510. So now I want to migrate an interface that now is "Eth0/0.10" to the new SFP "Gi1/0.10".
Question is: what is the right way to do it?
I have many features running on it like IPSec tunnels, Anyconnect, internet PAT, static NATs. What about ACLs?
Wich of these depends on the interface name? because it will have the same one of course.
Will I have to point the ACLs to the new interface? something else as well? As most of our services are through internet, this interface is the one with the most ACL entries.
Tahanks to everyone!
05-15-2015 07:12 AM
Hi,
Easiest way would be to change the Physical interface offline and not on the ASA device as you would not be able to configure two interfaces with same nameif. The nameif will be the same and rest of the configuration would not be affected.
Thanks and Regards,
Vibhor Amrodia
05-15-2015 07:29 AM
Sorry my friend, I don't get you.
I'm not talking about the physical change of the module.. right?
What do you mean by change the interface offline?
Thanks!
05-15-2015 07:54 AM
Hi,
I meant the Interface module itself.
If the modules on Slot 1 is SFP , you would only need to add this command:-
media-type sfp
Rest I meant this:-
Ex:-
Interface g0/3
nameif inside
ip address 3.3.3.3 255.255.255.0
no sh
You can migrate this to Interface module:-
Interface g1/3
media-type sfp
nameif inside
ip address 3.3.3.3 255.255.255.0
no sh
Thanks and Regards,
Vibhor Amrodia
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide