Transform access port level to trunk port level on ASA Firewall

[lim_chiwei]

I have all the existing access rules on both active and standby ASA 5550 Firewall with the outside interface configured as access port level previously. However, I intend to convert this access port level to a trunk port level between the Cisco Switch and the ASA Firewall with sub-interface. Would this change impact on the ASA Firewall 8.4(3) - such as access rule, object, routing, failover configuration etc? Do I have to export all the existing configuration and import back after the trunk port transformation?

[Vibhor Amrodia]

Hi,

In simple terms , If you make any changes to the interface configuration , it would not affect the rest of the configuration until and unless you make any changes to the nameif on that interface as that is how the ASA configuration is related to the interface configuration.

Thanks and Regards,

Vibhor Amrodia

[lim_chiwei]

Many thanks, Vibhor. You're right the nameif on that interface affected the configuration, mainly the access-group and route. The existing access-group and route will be removed when I changed the main interface to sub-interface with nameif changed as well on ASA firewall. However, the object, access-list and failover configuration remain unaffected. Thank you.

[Vibhor Amrodia]

Hi,

If the above recommendation helped you , I would request you to select the appropriate response as the correct answer so that we can mark this query as resolved.

Thanks and Regards,

Vibhor Amrodia