Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

Move Network from ASA interface

We have a network that has an interface on our ASA.  This network will be moving to a new location and will now be connected to one of our regular layer 3 switches.  What needs to be done on the ASA to disable this network and allow the correct routes to be in the ASA to allow access from the new location?



Super Bronze

Move Network from ASA interface


Well if you have the network configured on one of your interfaces then you naturally need to configure a new network for that link and take this into account in the "route" configurations on the ASA and in the "ip route" configurations on the other devices forwarding traffic to it. 

There will probably be some other configurations that need to be changed to use the new interface network/subnet also depending on if the interface just links to another router or if its directly connected to a host network through a switched network.

- Jouni

Hall of Fame Super Silver

Move Network from ASA interface

You would remove any access-lists and NAT rules that reference the interface and then unconfigure it completely (remove the nameif, ip address, security level assigned and, if monitoring as part of an HA pair, the monitor command).

Once the ASA no longer knows about the network as connected, you would need to check your existing routing processes or static route statements to ensure reachability of the network.

If you could provide the configuration we could provide more explicit instructions.

New Member

Re: Move Network from ASA interface

Remove the vlan from the ports, #shut, remove routings.

Make sure inside services, management configuration don't get affected by removing sources.


Sent from Cisco Technical Support iPhone App

CreatePlease to create content