How to assign two IPs on one Cisco ASA interface?

Question

Cisco

There is a Cisco ASA 5512. There is a local interface with an IP address of 192.168.1.1, how to hang another IP on the same interface. (Another subnet 192.168.2.1) preferably in cisco asdm, but you can also

Answer 1

Yes, no problem ASA can do it

interface Ethernet0/1
 no nameif
 no security-level
 no ip address
no shut
!
interface Ethernet0/1.1
 vlan 10
 nameif inside
 security-level 100
 ip address 192.168.1.1 255.255.255.0
no shut
!
interface Ethernet0/1.2
 vlan 20
 nameif inside1
 security-level 90
 ip address 192.168.2.1 255.255.255.0
no shut

Answer 2

how to hang another ip on the same interface

If I'm not mistaken, ASA does not support secondary ip, that is, in no way. On the other hand, almost certainly your problem (which, by the way?) can be solved in another way.

Answer 3

If sclerosis does not change me ASA does not know how. not a router (there is really a crutch www.ducea.com/2008/05/31/adding-a-secondary-ip-add... but no offense will be said if you want to use asdm you will not master it). In your case, you can expand the broadcast domain, give the mask /23, get a network of 512 addresses, which will include your 192.168.2.1.

Answer 4

Ars1S is right. Below is a screenshot of similar settings in ASDM. You need to go to the Configuration > Device Setup > Interfaces menu and reset the required physical interface to default. Then click the Add > Interface... button Specify the physical interface, select vlan id and subinterface id, assign an ip address. Repeat for the second address.