ASA Subinterfaces

[networker99]

I am trying to configure sub interfaces on a Cisco ASA running v7.2 but it will not let me use the sub interface command?

[massimiliano.serafino]

Hi,

If you have an interface say it gigabit ethernet 0/1 in order to create a subinterface of gigabitethernet 0/1 you have to issue the command:

interface gigabitethernet 0/1.x where x is a number (say it 1..for example)...

I hope this help.s

Best regards.

Massimiliano.

[networker99]

I tried that but I get the following

ciscoasa(config-if)# int ethernet0/0.100

^

ERROR: % Invalid input detected at '^' marker.

[andrew.prince]

check your license - do you have a ASA5505 ?

[networker99]

Yes, which license should I have?

[andrew.prince]

To be above to trunk and use sub-interfaces you need "Security Plus" Which allows for 20 vlans and trunking support.

HTH>

[networker99]

thanks

[andrew.prince]

check your license - do you have a ASA5505 ?

[MarcinChameleon]

I got similar problem.

My ASA says ethernet instead of Giga.

I def have Security Plus license, Check in "about" via ASDM.

Please help.

Marcin

[varrao]

Hi Marcin,

do you have the same ASA 5505???

Varun

[varrao]

Because ASA 5505 only have ethernet ports not gig ports.Here's  the datasheet:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html

Varun

[MarcinChameleon]

Thanks, it is ASA 8.2

But I did that:

ciscoasa(config)# int e0/0

ciscoasa(config-if)# no nameif

ciscoasa(config-if)# no sec

ciscoasa(config-if)# no security-level

ciscoasa(config-if)# no ip ad

ciscoasa(config-if)# no ip address

and got this when trying to create subinterface:

ciscoasa(config)# int ethernet 0/0.1

                      ^

ERROR: % Invalid input detected at '^' marker.

Any ideas?

[andrew.prince]

you create a vlan interface, then assign the physical interface to the vlan.

Int vlan x

Interface fa0/0

Switchport access vlan x

Sent from Cisco Technical Support iPad App

[varrao]

You cannot create sub-interfaces on the physical interface on the ASA 5505 but you would need to create vlan interfaces as specified above.

Thanks,

Varun

[MarcinChameleon]

I thought that with security plus license I can?

Basically I need outside interface to listen on more than 2 public IPs.

As outside interface is on /28 network.

If I create config as Andrew adicesed, will that work?

Marcin.