07-16-2008 10:37 PM - edited 03-11-2019 06:15 AM
I have pix 515 E and i want to configure secondary ip address on inside interface of pix 515 E,is it possible to configure secondary ip address on inside interface of pix 515E?
07-16-2008 10:50 PM
I don't believe it is possible.
You can however create a static NAT rule on the inside interface so it seems to have more than one IP address.
What is the purpose of this?
07-16-2008 11:17 PM
You can create subinterfaces on the inside Interface. Put the two subnets in two different VLAN's.
07-16-2008 11:22 PM
The ASA interface will be configured as trunk, while for each VLAN you will configure subinterfaces. Assign one VLAN ID per interface.
The IP of the ASA on each subinterface will be the default gateway for the devices on that subnet.
interface GigabitEthernet0/1
description "Trunk Connectivity with SW"
speed 100
duplex full
no nameif
no security-level
no ip address
!
interface GigabitEthernet0/1.100
vlan 100
nameif VLAN100
security-level 80
ip address xxxxxxx
!
interface GigabitEthernet0/1.200
vlan 200
nameif VLAN200
security-level 70
ip address xxxxxxx
!
interface GigabitEthernet0/1.300
vlan 300
nameif VLAN300
security-level 60
ip address xxxxxxx
An example with VLANs and remote access VPNs:
Please rate if this helped.
Regards,
Daniel
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: