Sorry my friend, I don't get

fborelli07 · ‎05-15-2015

Hello people!

I have the next issue.

We have bought a SSM 4 Gigabit module for our ASA 5510. So now I want to migrate an interface that now is "Eth0/0.10" to the new SFP "Gi1/0.10".

Question is: what is the right way to do it?

I have many features running on it like IPSec tunnels, Anyconnect, internet PAT, static NATs. What about ACLs?

Wich of these depends on the interface name? because it will have the same one of course.

Will I have to point the ACLs to the new interface? something else as well? As most of our services are through internet, this interface is the one with the most ACL entries.

Tahanks to everyone!

Vibhor Amrodia · ‎05-15-2015

Hi,

Easiest way would be to change the Physical interface offline and not on the ASA device as you would not be able to configure two interfaces with same nameif. The nameif will be the same and rest of the configuration would not be affected.

Thanks and Regards,

Vibhor Amrodia

fborelli07 · ‎05-15-2015

Sorry my friend, I don't get you.

I'm not talking about the physical change of the module.. right?

What do you mean by change the interface offline?

Thanks!

Vibhor Amrodia · ‎05-15-2015

Hi,

I meant the Interface module itself.

If the modules on Slot 1 is SFP , you would only need to add this command:-

media-type sfp

Rest I meant this:-

Ex:-

Interface g0/3

nameif inside

ip address 3.3.3.3 255.255.255.0

no sh

You can migrate this to Interface module:-

Interface g1/3