cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Ask the Expert- Smart Licensing in Enterprise Switches and Routers
183
Views
0
Helpful
1
Replies
Highlighted
Beginner

IPSec VPN Configuration Change

Hello

 

I have two network objects "VPN_range" and "Remote_VPN_range" defining the same subnet on my ASA IPSec Firewall.

object network VPN_range

 subnet x.x.x.x 255.255.240.0

object network Remove_VPN_range

 subnet x.x.x.x 255.255.240.0

 

Both of these have the below NAT's

object network VPN_range

 nat (outside,outside) dynamic interface

object network Remote_VPN_range

 nat(Remote_VPN,outside) dynamic interface

 

Remote_VPN is one of the interfaces on my firewall. Now I want to keep one of the Network Objects and Remove the other duplicate network object from the configuration

Can you guys please help me on how to do this?

 

Thanks

Ravindra

1 REPLY 1
VIP Advocate

Re: IPSec VPN Configuration Change

You would need to check what configuration on the firewall is referencing the object you want to remove and then compare that configuration to what is being referenced by the other object.  If the configuration is not identical you will need to make a decision on if you need to move some of the configuration to the object group you plan on keeping.

 

Once you have completed all your planning, create a script removing all configuration referencing the object group you want to remove and the object group itself, and if necessary, create a script adding configuration you need to move from the removed object group to the one you will be keeping.

--
Please remember to rate and select a correct answer