Urgent: how to configure different interface using same ip subnet in asa 5506?
1
Scenario is in old asa firewall 5505 I have switch port access vlan command in different interface. Just like below:
interface Ethernet0/0
!
interface Ethernet0/1
switchport access vlan 2
!
interface Ethernet0/2
switchport access vlan 2
!
interface Ethernet0/3
switchport access vlan 2
!
interface Ethernet0/4
switchport access vlan 2
!
interface Ethernet0/5
switchport access vlan 2
!
interface Ethernet0/6
switchport access vlan 2
!
interface Ethernet0/7
switchport access vlan 2
!
interface Vlan1
nameif Outside
security-level 0
ip address x.x.x.x 255.255.255.224
!
interface Vlan2
nameif Inside
security-level 100
ip address 172.16.0.1 255.255.0.0
From above I can use different interface as same network of 172.16.0.1.
But in 5506 command is not supported. Is there any thing I can do for the same scenario I can run in 5506 asa.
Ref:
GigabitEthernet1/1 unassigned YES manual administratively down down
GigabitEthernet1/2 unassigned YES unset administratively down down
GigabitEthernet1/3 unassigned YES unset administratively down down
GigabitEthernet1/4 unassigned YES unset administratively down down
GigabitEthernet1/5 unassigned YES unset administratively down down
GigabitEthernet1/6 unassigned YES unset administratively down down
GigabitEthernet1/7 unassigned YES unset administratively down down
GigabitEthernet1/8 unassigned YES unset administratively down down
Internal-Control1/1 127.0.1.1 YES unset up up
Internal-Data1/1 unassigned YES unset down down
Internal-Data1/2 unassigned YES unset up up
Internal-Data1/3 unassigned YES unset up up
Internal-Data1/4 169.254.1.1 YES unset up up
Management1/1 unassigned YES unset administratively down down
Please help. It is urgent. Thank you.
vlan cisco-asa firewall ip-address interface
asked 4 hours ago
chackers
132
add a comment |
1
Scenario is in old asa firewall 5505 I have switch port access vlan command in different interface. Just like below:
interface Ethernet0/0
!
interface Ethernet0/1
switchport access vlan 2
!
interface Ethernet0/2
switchport access vlan 2
!
interface Ethernet0/3
switchport access vlan 2
!
interface Ethernet0/4
switchport access vlan 2
!
interface Ethernet0/5
switchport access vlan 2
!
interface Ethernet0/6
switchport access vlan 2
!
interface Ethernet0/7
switchport access vlan 2
!
interface Vlan1
nameif Outside
security-level 0
ip address x.x.x.x 255.255.255.224
!
interface Vlan2
nameif Inside
security-level 100
ip address 172.16.0.1 255.255.0.0
From above I can use different interface as same network of 172.16.0.1.
But in 5506 command is not supported. Is there any thing I can do for the same scenario I can run in 5506 asa.
Ref:
GigabitEthernet1/1 unassigned YES manual administratively down down
GigabitEthernet1/2 unassigned YES unset administratively down down
GigabitEthernet1/3 unassigned YES unset administratively down down
GigabitEthernet1/4 unassigned YES unset administratively down down
GigabitEthernet1/5 unassigned YES unset administratively down down
GigabitEthernet1/6 unassigned YES unset administratively down down
GigabitEthernet1/7 unassigned YES unset administratively down down
GigabitEthernet1/8 unassigned YES unset administratively down down
Internal-Control1/1 127.0.1.1 YES unset up up
Internal-Data1/1 unassigned YES unset down down
Internal-Data1/2 unassigned YES unset up up
Internal-Data1/3 unassigned YES unset up up
Internal-Data1/4 169.254.1.1 YES unset up up
Management1/1 unassigned YES unset administratively down down
Please help. It is urgent. Thank you.
vlan cisco-asa firewall ip-address interface
asked 4 hours ago
chackers
132
2
Which command is not supported? Please include the commands you are trying to add to your 5506.
– Ron Trunk
4 hours ago
I'm not sure I completely understand. You can only have one layer-3 interface in a network. The switch interfaces are layer-2 interfaces, and they are all in the network for VLAN 2. You do not assign layer-3 addresses to layer-2 interfaces.
– Ron Maupin♦
4 hours ago
In asa 5505 first ex. Ethernet 0/2-7 are using the same subnet of VLAN 2. This how can I enable in 5506 as switchport access vlan command is not working inside in asa 5506 in interface GigabitEthernet1/2-7
– chackers
4 hours ago
add a comment |
1
1
1
Scenario is in old asa firewall 5505 I have switch port access vlan command in different interface. Just like below:
interface Ethernet0/0
!
interface Ethernet0/1
switchport access vlan 2
!
interface Ethernet0/2
switchport access vlan 2
!
interface Ethernet0/3
switchport access vlan 2
!
interface Ethernet0/4
switchport access vlan 2
!
interface Ethernet0/5
switchport access vlan 2
!
interface Ethernet0/6
switchport access vlan 2
!
interface Ethernet0/7
switchport access vlan 2
!
interface Vlan1
nameif Outside
security-level 0
ip address x.x.x.x 255.255.255.224
!
interface Vlan2
nameif Inside
security-level 100
ip address 172.16.0.1 255.255.0.0
From above I can use different interface as same network of 172.16.0.1.
But in 5506 command is not supported. Is there any thing I can do for the same scenario I can run in 5506 asa.
Ref:
GigabitEthernet1/1 unassigned YES manual administratively down down
GigabitEthernet1/2 unassigned YES unset administratively down down
GigabitEthernet1/3 unassigned YES unset administratively down down
GigabitEthernet1/4 unassigned YES unset administratively down down
GigabitEthernet1/5 unassigned YES unset administratively down down
GigabitEthernet1/6 unassigned YES unset administratively down down
GigabitEthernet1/7 unassigned YES unset administratively down down
GigabitEthernet1/8 unassigned YES unset administratively down down
Internal-Control1/1 127.0.1.1 YES unset up up
Internal-Data1/1 unassigned YES unset down down
Internal-Data1/2 unassigned YES unset up up
Internal-Data1/3 unassigned YES unset up up
Internal-Data1/4 169.254.1.1 YES unset up up
Management1/1 unassigned YES unset administratively down down
Please help. It is urgent. Thank you.
vlan cisco-asa firewall ip-address interface
asked 4 hours ago
chackers
132
Scenario is in old asa firewall 5505 I have switch port access vlan command in different interface. Just like below:
interface Ethernet0/0
!
interface Ethernet0/1
switchport access vlan 2
!
interface Ethernet0/2
switchport access vlan 2
!
interface Ethernet0/3
switchport access vlan 2
!
interface Ethernet0/4
switchport access vlan 2
!
interface Ethernet0/5
switchport access vlan 2
!
interface Ethernet0/6
switchport access vlan 2
!
interface Ethernet0/7
switchport access vlan 2
!
interface Vlan1
nameif Outside
security-level 0
ip address x.x.x.x 255.255.255.224
!
interface Vlan2
nameif Inside
security-level 100
ip address 172.16.0.1 255.255.0.0
From above I can use different interface as same network of 172.16.0.1.
But in 5506 command is not supported. Is there any thing I can do for the same scenario I can run in 5506 asa.
Ref:
GigabitEthernet1/1 unassigned YES manual administratively down down
GigabitEthernet1/2 unassigned YES unset administratively down down
GigabitEthernet1/3 unassigned YES unset administratively down down
GigabitEthernet1/4 unassigned YES unset administratively down down
GigabitEthernet1/5 unassigned YES unset administratively down down
GigabitEthernet1/6 unassigned YES unset administratively down down
GigabitEthernet1/7 unassigned YES unset administratively down down
GigabitEthernet1/8 unassigned YES unset administratively down down
Internal-Control1/1 127.0.1.1 YES unset up up
Internal-Data1/1 unassigned YES unset down down
Internal-Data1/2 unassigned YES unset up up
Internal-Data1/3 unassigned YES unset up up
Internal-Data1/4 169.254.1.1 YES unset up up
Management1/1 unassigned YES unset administratively down down
Please help. It is urgent. Thank you.
vlan cisco-asa firewall ip-address interface
vlan cisco-asa firewall ip-address interface
asked 4 hours ago
chackers
132
asked 4 hours ago
chackers
132
asked 4 hours ago
chackers
132
asked 4 hours ago
chackers
132
asked 4 hours ago
chackers
132
132
2
Which command is not supported? Please include the commands you are trying to add to your 5506.
– Ron Trunk
4 hours ago
I'm not sure I completely understand. You can only have one layer-3 interface in a network. The switch interfaces are layer-2 interfaces, and they are all in the network for VLAN 2. You do not assign layer-3 addresses to layer-2 interfaces.
– Ron Maupin♦
4 hours ago
In asa 5505 first ex. Ethernet 0/2-7 are using the same subnet of VLAN 2. This how can I enable in 5506 as switchport access vlan command is not working inside in asa 5506 in interface GigabitEthernet1/2-7
– chackers
4 hours ago
add a comment |
2
Which command is not supported? Please include the commands you are trying to add to your 5506.
– Ron Trunk
4 hours ago
I'm not sure I completely understand. You can only have one layer-3 interface in a network. The switch interfaces are layer-2 interfaces, and they are all in the network for VLAN 2. You do not assign layer-3 addresses to layer-2 interfaces.
– Ron Maupin♦
4 hours ago
In asa 5505 first ex. Ethernet 0/2-7 are using the same subnet of VLAN 2. This how can I enable in 5506 as switchport access vlan command is not working inside in asa 5506 in interface GigabitEthernet1/2-7
– chackers
4 hours ago
2
2
Which command is not supported? Please include the commands you are trying to add to your 5506.
– Ron Trunk
4 hours ago
Which command is not supported? Please include the commands you are trying to add to your 5506.
– Ron Trunk
4 hours ago
I'm not sure I completely understand. You can only have one layer-3 interface in a network. The switch interfaces are layer-2 interfaces, and they are all in the network for VLAN 2. You do not assign layer-3 addresses to layer-2 interfaces.
– Ron Maupin♦
4 hours ago
I'm not sure I completely understand. You can only have one layer-3 interface in a network. The switch interfaces are layer-2 interfaces, and they are all in the network for VLAN 2. You do not assign layer-3 addresses to layer-2 interfaces.
– Ron Maupin♦
4 hours ago
In asa 5505 first ex. Ethernet 0/2-7 are using the same subnet of VLAN 2. This how can I enable in 5506 as switchport access vlan command is not working inside in asa 5506 in interface GigabitEthernet1/2-7
– chackers
4 hours ago
In asa 5505 first ex. Ethernet 0/2-7 are using the same subnet of VLAN 2. This how can I enable in 5506 as switchport access vlan command is not working inside in asa 5506 in interface GigabitEthernet1/2-7
– chackers
4 hours ago
add a comment |
1 Answer
1
active
oldest
votes
3
The ASA 5506 doesn't have the switchport commands like the 5505. In routed mode, each interface is on a separate subnet, like a router.
answered 3 hours ago
Ron Trunk
34.5k23171
But when I use the routed mode BVI command is not supported ? As ASA should be working in routed more then the transparent mode.
– chackers
3 hours ago
Look at this example: petenetlive.com/KB/Article/0001422
– Ron Trunk
3 hours ago
Thanks man. But I already looked at it. And it is only working in transparent mode. @rontrunk. So I am searching for option to do the same in routed mode.
– chackers
3 hours ago
Oh, I see now I understand what you're trying to do. Bad news, I'm afraid. Edited my answer.
– Ron Trunk
3 hours ago
So is there any option available to do the same or not ?
– chackers
2 hours ago
|
show 1 more comment
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "496"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f55718%2furgent-how-to-configure-different-interface-using-same-ip-subnet-in-asa-5506%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
3
The ASA 5506 doesn't have the switchport commands like the 5505. In routed mode, each interface is on a separate subnet, like a router.
answered 3 hours ago
Ron Trunk
34.5k23171
But when I use the routed mode BVI command is not supported ? As ASA should be working in routed more then the transparent mode.
– chackers
3 hours ago
Look at this example: petenetlive.com/KB/Article/0001422
– Ron Trunk
3 hours ago
Thanks man. But I already looked at it. And it is only working in transparent mode. @rontrunk. So I am searching for option to do the same in routed mode.
– chackers
3 hours ago
Oh, I see now I understand what you're trying to do. Bad news, I'm afraid. Edited my answer.
– Ron Trunk
3 hours ago
So is there any option available to do the same or not ?
– chackers
2 hours ago
|
show 1 more comment
3
The ASA 5506 doesn't have the switchport commands like the 5505. In routed mode, each interface is on a separate subnet, like a router.
answered 3 hours ago
Ron Trunk
34.5k23171
But when I use the routed mode BVI command is not supported ? As ASA should be working in routed more then the transparent mode.
– chackers
3 hours ago
Look at this example: petenetlive.com/KB/Article/0001422
– Ron Trunk
3 hours ago
Thanks man. But I already looked at it. And it is only working in transparent mode. @rontrunk. So I am searching for option to do the same in routed mode.
– chackers
3 hours ago
Oh, I see now I understand what you're trying to do. Bad news, I'm afraid. Edited my answer.
– Ron Trunk
3 hours ago
So is there any option available to do the same or not ?
– chackers
2 hours ago
|
show 1 more comment
3
3
3
The ASA 5506 doesn't have the switchport commands like the 5505. In routed mode, each interface is on a separate subnet, like a router.
answered 3 hours ago
Ron Trunk
34.5k23171
The ASA 5506 doesn't have the switchport commands like the 5505. In routed mode, each interface is on a separate subnet, like a router.
answered 3 hours ago
Ron Trunk
34.5k23171
edited 3 hours ago
answered 3 hours ago
Ron Trunk
34.5k23171
answered 3 hours ago
Ron Trunk
34.5k23171
answered 3 hours ago
Ron Trunk
34.5k23171
34.5k23171
But when I use the routed mode BVI command is not supported ? As ASA should be working in routed more then the transparent mode.
– chackers
3 hours ago
Look at this example: petenetlive.com/KB/Article/0001422
– Ron Trunk
3 hours ago
Thanks man. But I already looked at it. And it is only working in transparent mode. @rontrunk. So I am searching for option to do the same in routed mode.
– chackers
3 hours ago
Oh, I see now I understand what you're trying to do. Bad news, I'm afraid. Edited my answer.
– Ron Trunk
3 hours ago
So is there any option available to do the same or not ?
– chackers
2 hours ago
|
show 1 more comment
But when I use the routed mode BVI command is not supported ? As ASA should be working in routed more then the transparent mode.
– chackers
3 hours ago
Look at this example: petenetlive.com/KB/Article/0001422
– Ron Trunk
3 hours ago
Thanks man. But I already looked at it. And it is only working in transparent mode. @rontrunk. So I am searching for option to do the same in routed mode.
– chackers
3 hours ago
Oh, I see now I understand what you're trying to do. Bad news, I'm afraid. Edited my answer.
– Ron Trunk
3 hours ago
So is there any option available to do the same or not ?
– chackers
2 hours ago
But when I use the routed mode BVI command is not supported ? As ASA should be working in routed more then the transparent mode.
– chackers
3 hours ago
But when I use the routed mode BVI command is not supported ? As ASA should be working in routed more then the transparent mode.
– chackers
3 hours ago
Look at this example: petenetlive.com/KB/Article/0001422
– Ron Trunk
3 hours ago
Look at this example: petenetlive.com/KB/Article/0001422
– Ron Trunk
3 hours ago
Thanks man. But I already looked at it. And it is only working in transparent mode. @rontrunk. So I am searching for option to do the same in routed mode.
– chackers
3 hours ago
Thanks man. But I already looked at it. And it is only working in transparent mode. @rontrunk. So I am searching for option to do the same in routed mode.
– chackers
3 hours ago
Oh, I see now I understand what you're trying to do. Bad news, I'm afraid. Edited my answer.
– Ron Trunk
3 hours ago
Oh, I see now I understand what you're trying to do. Bad news, I'm afraid. Edited my answer.
– Ron Trunk
3 hours ago
So is there any option available to do the same or not ?
– chackers
2 hours ago
So is there any option available to do the same or not ?
– chackers
2 hours ago
|
show 1 more comment
draft saved
draft discarded
Thanks for contributing an answer to Network Engineering Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f55718%2furgent-how-to-configure-different-interface-using-same-ip-subnet-in-asa-5506%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
2
Which command is not supported? Please include the commands you are trying to add to your 5506.
– Ron Trunk
4 hours ago
I'm not sure I completely understand. You can only have one layer-3 interface in a network. The switch interfaces are layer-2 interfaces, and they are all in the network for VLAN 2. You do not assign layer-3 addresses to layer-2 interfaces.
– Ron Maupin♦
4 hours ago
In asa 5505 first ex. Ethernet 0/2-7 are using the same subnet of VLAN 2. This how can I enable in 5506 as switchport access vlan command is not working inside in asa 5506 in interface GigabitEthernet1/2-7
– chackers
4 hours ago