Cisco ASA - Change Portchannel interfaces Giga to TenGiga

[SupportAC]

Hi,

We have a cluster of ASA5585 with a Portchannel configured with two Giga Intefaces. Now we want to replace this interfaces for a tengiga Interface without loss all the related configuration associated to the Portchannel and the Context.

We think that associating this two Tengiga Interface to the Portchannel group and, after that, remove the Giga interface of the group is enough.

Any idea if it could work well or something else is necessary?

Thanks

[balaji.bandi · Accepted solution]

Adding to exiting Port-channel with uneven link not permitted.

the best way is To Add new Like a Like new Port-channel ( shut old and bring new one) - there may be a small blip, (which can be done in maintenance window).

[SupportAC]

Hi,

Yes I know this must be the better option.

the problem is that this Portchannel have configuration associated and we want modify the configuration the minimal .

If we add a new one we need replicate all the configuration associated

Could be another way to do this?

Regards

Ricardo Neira

[Marvin Rhoads]

You have to do it like @balaji.bandi said.

Replicating the configuration is pretty simple.

[SupportAC]

Hi,

I understand what both you say.

So, for example, if I had this config:

interface GigabitEthernet0/0
description es1c6kcore0 Gi1/4/8
channel-group 1 mode active
!
interface GigabitEthernet0/1
description es1c6kcore0 Gi2/4/8
channel-group 1 mode active
!
interface Port-channel1
description Enlace de trafico a CORE
lacp max-bundle 8
port-channel load-balance src-dst-ip-port
!
interface Port-channel1.708
description Alpha
vlan 708
!
interface Port-channel1.709
description Beta
vlan 709
!
interface Port-channel1.713
description Charlie
vlan 713
!
interface Port-channel1.722
description Delta
vlan 722
!
context Alarmas
allocate-interface Port-channel1.708 Alpha
allocate-interface Port-channel1.709 Beta
allocate-interface Port-channel1.713 Charlie
allocate-interface Port-channel1.722 Delta

I had to config something like this:

interface Port-channel11
description Enlace de trafico a CORE
lacp max-bundle 8
port-channel load-balance src-dst-ip-port
!
!
interface Port-channel11.708
description Alpha
vlan 708
!
interface Port-channel11.709
description Beta
vlan 709
!
interface Port-channel11.713
description Charlie
vlan 713
!
interface Port-channel11.722
description Delta
vlan 722
!
interface TenGigabitEthernet0/8
description es1c6kcore0 Gi1/4/8
channel-group 11 mode active
!
interface TenGigabitEthernet0/9
description es1c6kcore0 Gi2/4/8
channel-group 11 mode active
!
context Alarmas
allocate-interface Port-channel11.708 Alpha
allocate-interface Port-channel11.709 Beta
allocate-interface Port-channel11.713 Charlie
allocate-interface Port-channel11.722 Delta

Is this correct?

[balaji.bandi]

High level yes make sure new interface is in shutdown mode after configuration, and change window makes them enable and monitor.

[SupportAC]

Hi,

I tried config this to test and don´t work as we expected (the Zone behind the context dissapear)

We configure a new subinterface behind the port channel

!

interface Port-channel1.8

description PRUEBA_1

vlan 8

!

And associate it to a zone behind the context

context P-Integradas-Yec

allocate-interface Port-channel1.8 PRUEBA visible

A new zone was created in the FW

After that we create a new Portchannel with its subinterface

interface Port-channel2.14

description PRUEBA_2

vlan 14

!

When tried to allocate it with the zone an error appears because it was  already created so I had to disable from the PO1 and allocated it to the PO2

context P-Integradas-Yec

no allocate-interface Port-channel1.8 PRUEBA visible

allocate-interface Port-channel2.14 PRUEBA visible

After that the zone (and his configuration) dissapeared from the FW.

We want to maintain this config because there are a lot of config associated to this zones

Could be another task or step to do that maintain this configuration ?

[balaji.bandi]

Not sure where this Port-channel 1 and 2 connected.

As per the original Post you like to switch over from 1GB  to 10GB. 

But recent information looks different than the original information.

Do you have any high-level diagram of how its connected, and switch side config to look?

[SupportAC]

Hi,

Yes the final configuration must be swithing from Gb to 10Gb interfaces.

This was a test configuration with Po yet created to test the consistence of the config before apply the final changes.

The case is like I post before. when we tried to associate the zone to the PO subinterface, if this one is yet associated, the system requires delete and associated again but the zone configuration dissapear.

The finish goal is change all the conections without lost configuration cause this is applied in another config like ACL, routes, acces-groups ...