Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

secondary ip address configuration

I have pix 515 E and i want to configure secondary ip address on inside interface of pix 515 E,is it possible to configure secondary ip address on inside interface of pix 515E?

3 REPLIES
New Member

Re: secondary ip address configuration

I don't believe it is possible.

You can however create a static NAT rule on the inside interface so it seems to have more than one IP address.

What is the purpose of this?

Re: secondary ip address configuration

You can create subinterfaces on the inside Interface. Put the two subnets in two different VLAN's.

Re: secondary ip address configuration

The ASA interface will be configured as trunk, while for each VLAN you will configure subinterfaces. Assign one VLAN ID per interface.

The IP of the ASA on each subinterface will be the default gateway for the devices on that subnet.

interface GigabitEthernet0/1

description "Trunk Connectivity with SW"

speed 100

duplex full

no nameif

no security-level

no ip address

!

interface GigabitEthernet0/1.100

vlan 100

nameif VLAN100

security-level 80

ip address xxxxxxx

!

interface GigabitEthernet0/1.200

vlan 200

nameif VLAN200

security-level 70

ip address xxxxxxx

!

interface GigabitEthernet0/1.300

vlan 300

nameif VLAN300

security-level 60

ip address xxxxxxx

An example with VLANs and remote access VPNs:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806ab788.shtml

Please rate if this helped.

Regards,

Daniel

110
Views
0
Helpful
3
Replies