ASA Subinterfaces

[networker99]

I am trying to configure sub interfaces on a Cisco ASA running v7.2 but it will not let me use the sub interface command?

[Julio Carvajal]

Hello Marcin,

The thing with the ASA 5505 is that without the security plus license you will not be able to have more than 2 interfaces unrestricted. So that is why you need it.

Now that you have it you can create more vlans with the suggestions Andrew have provided you.

Seems like you want the ASA to have connectivity to the outside using 2 ip addreses on the same subnet, that will not be possible as each vlan interface got to be on a different broadcast domain. You can configure the ASA to proxy-arp more than 1 ip address on its outside interface by using static nat.

Also remember that the ASA does not support PBR.

Hope this helps.

Do rate helpful posts.

Julio

[andrew.prince]

You cannot have an ASA "listen" i.e have an interface configured with 2 ip addresses.  You configure 1 ip address on the outside, and your ISP will "route" the other ip range to that IP and you can then assign the other IP range to another seperate interface, or as Julio has also pointed out.

HTH>

[MarcinChameleon]

Hi All,

I had to return the ASA 5505 because of lack of functionality I was looking for.

It’s pretty shame for cisco ASA 5505 and the money you pay for it, and then cannot do job as old Watchguard x1000 L

Thanks for  all support.

Marcin.

[Peter Long]

See Cisco ASA 5500 - Sub Interfaces and VLANS

Pete