Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Deleting a Logical Interface removes partly ASA conf

Hi,

I am running asa 8.4(3) and asdm 6.4(7).

I have a serious issue when i delete a logical interface via asdm, it seems like a big part of the asa configuration disapear as well, and then loose conenctivity.

.

I have removed manually all the configuration associated to this interface, either in the firewall and routing sections. A double-check on the conf file shows that there are NO configuration left associated with this interface.

So I deleted it using ASDM, and then the worse happened, i loose part of all ASA configuration.

A copy paste or a backupe conf allowed me to roll back, and according to the console looks like MOST of the asa conf was gone.

If you have any idea,  any experience or know any related bugs, i would appreciate your help!

Best regards

Florian

Everyone's tags (4)
2 REPLIES
Super Bronze

Deleting a Logical Interface removes partly ASA conf

Hi,

I would suggest doing it  straight from the CLI instead of ASDM. I have never trust the ASDM to  give an accurate information about changes.

Could you also tell us the configuration of the actual interface that you removing?

I would also suggest on the ASDM  side that you enable the preview of the commands sent to the ASA so you  can see exactly what commands the ASDM is going to issue on the ASA.

Removing an interface that holds  a "nameif" should not remove anything else other than configurations  referring to that interface. I wonder if you are actually changing  something related to interface configuration that  will affect more interfaces than just the one you are intending to  change/remove.

- Jouni

New Member

Deleting a Logical Interface removes partly ASA conf

Hi Jouni,

thanks for your message. I enabled the command preview on the ADSM and could see that nothing else is removed aprt from the interface. I had same issue with the CLI.

I openned a SR and TAC found this bug :

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCty45900

Removing an interface will affect the NAT configuration where "any" keyword is used.

I guess i will upgrade.

Thanks !

260
Views
0
Helpful
2
Replies