01-13-2020 04:29 AM - edited 02-21-2020 09:49 AM
Hi Guys,
I have ASA5516X that will run in multiple context and one management VLAN. Is it possible to assign the management interface to difference context so that each context's mgmt traffic will pass through that?
Thanks
01-13-2020 05:43 AM
01-13-2020 12:41 PM
as @Mark Malone is right. however, if you have a requirement what you can do is to create a sub interface (ASA does not allow management interface to create a sub-interface) if you have any other spare gig port left you can create a sub-interface (this also require some config work at switch side). than go to each context and allocate it.
for example.
ASA-1
!
interface gig0/7
no shut
!
interface gig0/7.10
vlan 10
!
interface gig0/7.20
vlan 20
!
context Alpha
allocate-interface gig0/7.10
config-url disk0:/Alpha.cfg
!
context Beta
allocate-interface gig0/7.20
config-url disk0:/Beta.cfg
!
changeto context Aplha
!
interface gig0/7.10
nameif mgmt
security-level 100
ip address x.x.x.x.
!
changeto context Beta
!
interface gig0/7.20
nameif mgmt
security-level 100
ip address x.x.x.x.
!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide