is Shared Interface possible in multiple context in ASA?

harish.ab · ‎08-02-2009

Hello Guys,

I have a question from ASA multiple context concept

I have an outside interface which is connected with my outside world (with IP address 10.1.1.1 and have 3 different contexts (A,B and C). is it possible to share outside interface in each context so that a PC located in outside interface can communicate to all contexts

Thanks in advance

netsec · ‎08-02-2009

you can map one physical interface to several contaxt interfaces. the ASA use classification to with IP adress or with MAC adress, or via NAT to send paket to the correct context.

classification work only in 1 direction.

for more info: http://www.cisco.com/en/US/docs/security/asa/asa81/config/guide/contexts.html#wp1124172

I hope it's useful

suschoud · ‎08-03-2009

yes,to keep it simple,please add " mac-auto " command in config.the shared interface will have different mac addresses in different contexts to classify traffic.

hTh

Sushil

TAC