Firewall Interface for migration

[Tzy Chun Chong]

Hi Team,

My customer using ASA5510 firewall and they'll have Internet(outside) interface migration, i need to bring up the secondary internet now before the migration. I intend to use available interface but found license is limited to max 4 interface. We found the managemet interface is actually not in-use. All the access is actually target to inside interface. My intention is to disable the mgmt0/0 interface and enable the Eth0/3 interface.

I'm not sure what's the procedure to do this, can i just shutdown or clear the config in management0/0 interface and start the Eth0/3 configuration? Guess is not simple like that?

 0: Ext: Ethernet0/0         : address is 0015.c695.dafc, irq 9
 1: Ext: Ethernet0/1         : address is 0015.c695.dafd, irq 9
 2: Ext: Ethernet0/2         : address is 0015.c695.dafe, irq 9
 3: Ext: Not licensed        : irq 9
 4: Ext: Management0/0       : address is 0015.c695.dafb, irq 11
 5: Int: Not licensed        : irq 11
 6: Int: Not licensed        : irq 5

Licensed features for this platform:
Maximum Physical Interfaces : 4         
Maximum VLANs               : 10  

Pls advice, I will vote any helpful threads. Thanks.

[Karsten Iwen · Accepted solution]

You really never updated your customers firewall in the last ~10 years?

This interface-restriction was lifted in version 7.2(2) in 2006.

[Tzy Chun Chong]

Hi Karsten,

I'm just join less than 1 year and I'm not sure the history.

I can see the firewall current version is 7.2(1).

Meaning i just need the OS upgrade and the rest of physical interface should be workable? Any document reference for this?

Pls advice, I will vote for helpful reply. thanks.

[Tzy Chun Chong]

I got the answer, thanks.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa80/configuration/guide/conf_gd/license.html#wp1142379

Increased interfaces for the Base license on the ASA 5510

7.2(2)

For the Base license on the ASA 5510, the maximum number of interfaces was increased from 3 plus a management interface to unlimited interfaces.