secondary ip address configuration

Unanswered Question
dhananjoy chowdhury Wed, 07/16/2008 - 23:17
User Badges:
  • Silver, 250 points or more

You can create subinterfaces on the inside Interface. Put the two subnets in two different VLAN's.

Daniel Voicu Wed, 07/16/2008 - 23:22
User Badges:
  • Silver, 250 points or more

The ASA interface will be configured as trunk, while for each VLAN you will configure subinterfaces. Assign one VLAN ID per interface.

The IP of the ASA on each subinterface will be the default gateway for the devices on that subnet.

interface GigabitEthernet0/1

description "Trunk Connectivity with SW"

speed 100

duplex full

no nameif

no security-level

no ip address


interface GigabitEthernet0/1.100

vlan 100

nameif VLAN100

security-level 80

ip address xxxxxxx


interface GigabitEthernet0/1.200

vlan 200

nameif VLAN200

security-level 70

ip address xxxxxxx


interface GigabitEthernet0/1.300

vlan 300

nameif VLAN300

security-level 60

ip address xxxxxxx

An example with VLANs and remote access VPNs:

Please rate if this helped.




This Discussion