Do the sub-interface of ASA firewall has limit of bandwidth

do the sub-interface of ASA firewall has limit of bandwidth? or how does the bandwidth of the physical interface divided among the sub-interface? is there a cisco documentation url link that explains this?

Nakayama-san,
The configuration recommendation to limit the traffic entering the router was intended for legacy (i.e. non-ISR routers). Since you are using a 2811, I would recommend that you test WAAS without these limitations configured.
Thanks,
Zach

Similar Messages

IPSec tunnel on sub-interface on ASA 5510

Hello All,
I working on a security solution using ASA firewall and need some technical advice on ASA. Is it possible to setup a IPSec tunnels on each subinterface of a physical interface on ASA 5510?
I would be greatul if someone please reply post this with some details.
Regards,
Muds

Hi Jennifer,
Thanks very much for your reply. I understand where you coming from, but the reason of using sub-interfaces is that, we have only one physical interface on the firewall connected to the MPLS cloud, and we need to setup a seperate IPSec tunnels for each client for security and integrity. In the current scenario, I have static peers and we can easily setup a static route to peer address.
Many thanks for your assistance, please feel free to to advise if you have any other suggestion.
Regards,
Muds

Can I rate-limit on the sub-interface in cisco asr 1013?

Hi,
I am looking for the command of rate-limit on a sub-interface in cisco asr 1013.
Cisco IOS Software, IOS-XE Software (X86_64_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.2(2)S, RELEASE SOFTWARE (fc1)
IOS XE Version: 03.06.00.S
Please let me know if it is possible in cisco asr 1013. If yes then what are the commands.
Zobair

The ASR no longer supports the rate-limit command, but it does support the same functionality in a QoS policy.
Please find a sample configuration -
ASR1004(config)#policy-map test
ASR1004(config-pmap)#class class-default
ASR1004(config-pmap-c)#shape average 10000
Applying for both ingress and egress : -
ASR1004(config)#int gig1/1/0
ASR1004(config-if)#service-policy output test
or
ASR1004(config-if)#service-policy input test

Include multiple sub-interfaces in Cisco ASA for VPN tunnel

I am trying to create a VPN tunnel between two Cisco ASAs where one ASA has multiple sub-interfaces.
Say, In Cisco ASA 5550(in datacentre), I created multiple subinterfaces with VLAN ID as below:
Inside, int0/1 : 10.1.1.0/24
DMZ, int0/1.100: 10.1.100.0/24 (VLAN 100)
Production, int 0/1.101 : 10.1.101.0/24 (VLAN 101)
Management, int 0/1.102: 10.1.102.0/24 (VLAN 102)
And another Cisco ASA 5505 is only configured with 1 x inside interface Inside, int 0/1: 192.168.1.0/24
So far, I have only been able to provide outside access to one of the sub-interfaces as NAT rule on inside interface didn't work for VLANs. Hence had to issue Global NAT rule to be applied on Production subinterface so that production VLAN can have outside access. I have managed to establish VPN tunnel between two ASAs on Production sub-interface only, Source interface = Production subinterface
Additional settings:
Have ACL to allow all sub interfaces to access outsite ( lower security level)
NAT rules is configured on Production subinterface with Source NAT Type as Dynamic PAT; when this was configured with source interface as inside, PCs behind various VLAN coun't access internet.
I want to establish a site-to-site VPN tunnel with multiple sub-interfaces of Cisco ASA 5550 to Cisco ASA 5505. Would you please suggest what I am missing in my configuration? I need to be able to access multiple VLANs of datacentre from remote site.

I am trying to create a VPN tunnel between two Cisco ASAs where one ASA has multiple sub-interfaces.
Say, In Cisco ASA 5550(in datacentre), I created multiple subinterfaces with VLAN ID as below:
Inside, int0/1 : 10.1.1.0/24
DMZ, int0/1.100: 10.1.100.0/24 (VLAN 100)
Production, int 0/1.101 : 10.1.101.0/24 (VLAN 101)
Management, int 0/1.102: 10.1.102.0/24 (VLAN 102)
And another Cisco ASA 5505 is only configured with 1 x inside interface Inside, int 0/1: 192.168.1.0/24
So far, I have only been able to provide outside access to one of the sub-interfaces as NAT rule on inside interface didn't work for VLANs. Hence had to issue Global NAT rule to be applied on Production subinterface so that production VLAN can have outside access. I have managed to establish VPN tunnel between two ASAs on Production sub-interface only, Source interface = Production subinterface
Additional settings:
Have ACL to allow all sub interfaces to access outsite ( lower security level)
NAT rules is configured on Production subinterface with Source NAT Type as Dynamic PAT; when this was configured with source interface as inside, PCs behind various VLAN coun't access internet.
I want to establish a site-to-site VPN tunnel with multiple sub-interfaces of Cisco ASA 5550 to Cisco ASA 5505. Would you please suggest what I am missing in my configuration? I need to be able to access multiple VLANs of datacentre from remote site.

ASR9000/XR - BNG - L3 sub-interface limit for trunk (4096) error - what is the work around?

We currently have 7,500 broadband subscribers that we will be terminating on our ASR 9001.
Each one of our customers will be terminating on a sub-interface on a bundle.
On the 9k, there will be a QoS policy applied to rate-limit their broadband connection (see example below).
The challenge that we are running into right now is scaling beyond 4096 L3 sub-interfaces. When running through this in our lab, we receive the following fail message:
RP/0/RSP0/CPU0:BNG(config-subif)#show config failed
Tue Mar 10 18:32:07.552 UTC
!! SEMANTIC ERRORS: This configuration was rejected by
!! the system due to semantic errors. The individual
!! errors with each failed configuration command can be
!! found below.
interface Bundle-Ether10.6941171
!!% The L3 sub-interface limit for the trunk interface has been reached: Trunk limit for L3 subinterfaces on Bundle-Ether10 is 4096
We have added the following on to each of the sub-interfaces to "fake" out the NPU, but even with SPD configured, we are receiving the max 4096 message:
service-policy output <POLICY> subscriber-parent resource-id 0
service-policy output <POLICY> subscriber-parent resource-id 1
service-policy output <POLICY> subscriber-parent resource-id 2
service-policy output <POLICY> subscriber-parent resource-id 3
It is my understanding that we have a total of 4 resource ID's to use (0-3) and the ASR 9001 will support up to 32,000 sub-interfaces (system wide or 8,000 sub interfaces per resource-id).
See attached image for reference this design.
Main question to the community is what is the work around to scale beyond 4096 L3 sub-interfaces??
In our case it is not feasible to bring in additional bundles and spread the customers out.
Look forward to your responses.
Below is a sample configuration:
policy-map 10M_D
class class-default
shape average 10100000 bps
end-policy-map
policy-map 10M_U
class class-default
police rate 10300000 bps
exceed-action drop
end-policy-map
interface Bundle-Ether10.650102
description ---INT: GigabitEthernet0/0/1.650102 NAME: TEST #1---
service-policy input 10M_U
service-policy output 10M_D subscriber-parent resource-id 0
ipv4 point-to-point
local-proxy-arp
ipv4 unnumbered Loopback10
encapsulation dot1q 650 second-dot1q 102
interface Bundle-Ether10.650103
description ---GigabitEthernet0/0/1.650103 NAME: TEST #2---
service-policy input 10M_U
service-policy output 10M_D subscriber-parent resource-id 1
ipv4 point-to-point
local-proxy-arp
ipv4 unnumbered Loopback10
encapsulation dot1q 650 second-dot1q 103
interface Bundle-Ether10.650104
description ---INT: GigabitEthernet0/0/1.650104 NAME: TEST #3---
service-policy input 10M_U
service-policy output 10M_D subscriber-parent resource-id 2
ipv4 point-to-point
local-proxy-arp
ipv4 unnumbered Loopback10
encapsulation dot1q 650 second-dot1q 104
interface Bundle-Ether10.650105
description ---INT: GigabitEthernet0/0/1.650105 NAME: TEST #4---
service-policy input 10M_U
service-policy output 10M_D subscriber-parent resource-id 3
ipv4 point-to-point
local-proxy-arp
ipv4 unnumbered Loopback10
encapsulation dot1q 650 second-dot1q 105
interface Bundle-Ether10.650106
description ---INT: GigabitEthernet0/0/1.650106 NAME: TEST #5---
service-policy input 10M_U
service-policy output 10M_D subscriber-parent resource-id 0
ipv4 point-to-point
local-proxy-arp
ipv4 unnumbered Loopback10
encapsulation dot1q 650 second-dot1q 106
interface Bundle-Ether10.650107
description ---INT: GigabitEthernet0/0/1.650107 NAME: TEST #6---
service-policy input 10M_U
service-policy output 10M_D subscriber-parent resource-id 1
ipv4 point-to-point
local-proxy-arp
ipv4 unnumbered Loopback10
encapsulation dot1q 650 second-dot1q 107
interface Bundle-Ether10.650108
description ---INT: GigabitEthernet0/0/1.650108 NAME: TEST #7---
service-policy input 10M_U
service-policy output 10M_D subscriber-parent resource-id 2
ipv4 point-to-point
local-proxy-arp
ipv4 unnumbered Loopback10
encapsulation dot1q 650 second-dot1q 108
interface Bundle-Ether10.650109
description ---INT: GigabitEthernet0/0/1.650109 NAME: TEST #8---
service-policy input 10M_U
service-policy output 10M_D subscriber-parent resource-id 3
ipv4 point-to-point
local-proxy-arp
ipv4 unnumbered Loopback10
encapsulation dot1q 650 second-dot1q 109

xander,
Thanks for sharing the QinQ username, works perfectly.
couple of design questions for you.
#1 - If i have >7500 subscribers that will be terminating on this bundle, would this be the best design to ensure that i can scale up to 32,000 subscribers on the BE <leveraging the subscriber-parent resource-id (0-4)>
EXAMPLE
interface Bundle-Ether10.100
description BE10.100 – Area 1 - BNG customers - QinQ
ipv4 point-to-point
ipv4 unnumbered Loopback0
service-policy output <POLICY> subscriber-parent resource-id 0
service-policy type control subscriber IP_PM
ipsubscriber ipv4 l2-connected
initiator dhcp
encapsulation ambiguous dot1q 100 second-dot1q any
interface Bundle-Ether10.200
description BE10.200 – Area 2 - BNG customers - QinQ
ipv4 point-to-point
ipv4 unnumbered Loopback0
service-policy output <POLICY> subscriber-parent resource-id 1
service-policy type control subscriber IP_PM
ipsubscriber ipv4 l2-connected
initiator dhcp
encapsulation ambiguous dot1q 200 second-dot1q any
interface Bundle-Ether10.300
description BE10.300 – Area 3 - BNG customers - QinQ
ipv4 point-to-point
ipv4 unnumbered Loopback0
service-policy output <POLICY> subscriber-parent resource-id 3
service-policy type control subscriber IP_PM
ipsubscriber ipv4 l2-connected
initiator dhcp
encapsulation ambiguous dot1q 300 second-dot1q any
interface Bundle-Ether10.400
description BE10.400 – Area 4 - BNG customers - QinQ
ipv4 point-to-point
ipv4 unnumbered Loopback0
service-policy output <POLICY> subscriber-parent resource-id 4
service-policy type control subscriber IP_PM
ipsubscriber ipv4 l2-connected
initiator dhcp
encapsulation ambiguous dot1q 400 second-dot1q any
#2 - How do I verify in XR the CoA speed profile that is pushed down from RADIUS to a given subscriber?
I thought I might see the dynamic policy using the command below, but no luck.
Do you know the correct command?
RP/0/RSP0/CPU0:bng-asr9001#show policy-map inter be10.1.ip5
Wed Apr 1 14:12:06.390 UTC
Bundle-Ether10.1.ip5 input: __sub_55ffffff8b7dffffffad
Class class-default
Classification statistics (packets/bytes) (rate - kbps)
Matched : 126959/10831088 14
Transmitted : N/A
Total Dropped : N/A
Policy __sub_55ffffff8b7dffffffad_child1 Class class-default
Classification statistics (packets/bytes) (rate - kbps)
Matched : 126959/10831088 14
Transmitted : N/A
Total Dropped : 325/322582 0
Policing statistics (packets/bytes) (rate - kbps)
Policed(conform) : 126634/10508506 14
Policed(exceed) : 325/322582 0
Policed(violate) : 0/0 0
Policed and dropped : 325/322582
Policed and dropped(parent policer) : N/A
Bundle-Ether10.1.ip5 output: __sub_6effffff81ffffffbfffffffdb
Class class-default
Classification statistics (packets/bytes) (rate - kbps)
Matched : 199642/280153690 453
Transmitted : N/A
Total Dropped : N/A
Policy __sub_6effffff81ffffffbfffffffdb_child1 Class class-default
Classification statistics (packets/bytes) (rate - kbps)
Matched : 199642/280153690 453
Transmitted : N/A
Total Dropped : 26930/38989025 61
Policing statistics (packets/bytes) (rate - kbps)
Policed(conform) : 172712/241164665 392
Policed(exceed) : 26930/38989025 61
Policed(violate) : 0/0 0
Policed and dropped : 26930/38989025
Policed and dropped(parent policer) : N/A
RP/0/RSP0/CPU0:bng-asr9001#
#3 - CoA QoS profile -> I'm using the following avpair for ingress / egress qos. However when validating against a speed test server, my results are well above the 10Mbps / 10Mbps I have provisioned. Actual is more of in the ~15Mbps/15Mbps range.
Am I missing additional config in the policing section?
cisco-avpair = "ip:qos-policy-in=add-class(sub, (class-default,class-default),police(10000))",
cisco-avpair += "ip:qos-policy-out=add-class(sub, (class-default,class-default),police(10000))"
Appreciate it in advance xander!
-ae

LMS 4.2 sub-interface not available in the instance selection window creating poller

Hi All,
I have sub-interfaces created on the switch and are in active(up/up) state,but these sub-interface not available for selection in the instance window while creating the poller, and am not able to monitor the traffic on these sub interface in the performance management.
LMS will not display the interfaces in the instance selection window if they are not active,but here the sub-interface are in active state but these are
not available. can anyboody help me out ??
Thanks,
Channa

Any Idea..??

How to find the ingress interface for traffic

Hi, I have a few ASA's configured with multiple interfaces and multiple sub-interfaces. With many different subnets behind these interfaces.
Is there any easy way from the command line to work out which interface from a specific IP is coming in on. e.g say I have a host behind interface gi1/0.200 and it's pinging the sub-interface address x.x.x.x of gi1/0.200 - How do I know if I just do a debug icmp trace etc? I can see traffic coming in, but not on what interface.
On occasion I inherit a firewall without a topology diagram and have a nightmare finding out what traffic is coming in what interface. This is no good to me if I've got 20 interfaces and 50 subnets behind them.

Hi,
The ASA doesnt really have that many routing related commands as some Cisco IOS devices.
I don't know really if there is any other way to determine the current setup other than checking the routing table.
The following command will show the current routing table
show route
The following command will show the currently configured static routes
show run route
If you want a brief information about the actual interfaces and their IP addresses you can use the following
show ip address
The following also shows similiar information but not for example the subnet mask of the interface
show interface ip brief
If you are referring to seeing what traffic is going through the firewall and where its originated from then you should have the "logging" level set to "informational". This will by default show you log messages related to connection and translation forming. Naturally you have to configure this for the location where you are viewing the logs
For example
buffered = Device log buffer
trap = Syslog server
asdm = The ASDM Monitoring sections logging window
Naturally you can also see the source and destination interface in the connection table
show conn
show conn long
I don't think the ASA really has any other way to show you how the network is built. You just have to refer to the actual configuration and routing table.
- Jouni

DMZ Sub interfaces into sub interface

Hi,
We have ASA FW 5010 in our organization and we have 4 DMZ's under the DMZ interface on ASA and all DMZ's are created on sub interfaces and assigned different VLANS on each DMZ's like
DMZ-1 = 172.20.1.x - VLAN 1000
DMZ-2 = 172.20.2.x - VLAN 1200
DMZ-3 = 172.20.3.x - VLAN 1300
DMZ-4 = 172.20.4.x - VLAN 1400
My question is:
Can we break sub interface (DMZ-4) into again another sub interface and assign another IP address like
DMZ-4 = 172.20.4.x
---------= 172.20.5.x
Means one VLAN has two IP addresses for gateway.
One thing more how many times we can break one interface into subinterfaces.
I hope my question is enough for understanding.
Regards,
Saeed

> Can we break this feature on catalyst switches 2960 or 3560?
You just want to have two IP-networks in one VLAN? If yes, that is possible on Routers and Switches with secondary IP-addresses. But the ASA doesn't support that.

Main Interface and Sub Interface

Hello,
I'm fairly new to ASA firewalls so some help is appreciated. Can anyone explain the point of the below config. I thought that normally when using Vlan's there would be no point on configuring a nameif & security level on the main interface? In this case what would configuring an ACL based NAT exemption on the Trunk interface do to traffic on the sub interfaces?
interface GigabitEthernet1/0
nameif Trunk
security-level 100
no ip address
interface GigabitEthernet1/0.100
vlan 100
nameif VLAN100
security-level 100
ip address 192.168.100.1 255.255.255.0 standby 192.168.100.2
interface GigabitEthernet1/0.101
vlan 101
nameif VLAN101
security-level 90
ip address 192.168.101.1 255.255.255.0 standby 192.168.101.2
interface GigabitEthernet1/0.102
vlan 102
nameif VLAN102
security-level 80
ip address 192.168.102.1 255.255.255.0 standby 192.168.102.2
Thanks Steve

You're right about the main interface.
If you use subinterfaces, you typically do not also want the physical interface to pass traffic, because the physical interface passes untagged packets. Because the physical interface must be enabled for the subinterface to pass traffic, ensure that the physical interface does not pass traffic by leaving out the nameif command. If you want to let the physical interface pass untagged packets, you can configure the nameif command as usual.
http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/intrface.html#wp1044006
Hope that helps

Sub-interfaces on PO

Hi, I have put 2 physicl interfaces (te0/8 & 9) on the ASA-5585 into a PO and am assigning ips/vlans to the sub-interfaces. I have 2 issues: - Why am I not able to ping the other sub-interface from the ASA itself? (I can ping the 1st one), Secondly, why the IPs are not visible in "sh int ip brief" ?Although I can see them in "sh ip" ..
/actNoFailover(config-if)# int po17.100
/actNoFailover(config-subif)# vlan 100
/actNoFailover(config-subif)# ip add
/actNoFailover(config-subif)# ip address 100.1.1.1 255.255.255.0
/actNoFailover(config-subif)# int po17.101
/actNoFailover(config-subif)# vlan 101
/actNoFailover(config-subif)# ip address 101.1.1.1 255.255.255.0
/actNoFailover(config-subif)# int po17.102
/actNoFailover(config-subif)# vlan 102
/actNoFailover(config-subif)# ip address 102.1.1.1 255.255.255.0
/actNoFailover(config-subif)# ping 100.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 100.1.1.1, timeout is 2 seconds:
Success rate is 100 percent (5/5), round-trip min/avg/max = 30/32/40 ms
/actNoFailover(config-subif)# ping 101.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 101.1.1.1, timeout is 2 seconds:
/actNoFailover(config)# sh int ip brie
Interface                  IP-Address      OK? Method Status                Protocol
TenGigabitEthernet0/8      unassigned      YES unset up                    up
TenGigabitEthernet0/9      unassigned      YES unset up                    up
Port-channel17             unassigned      YES unset up                    up
Port-channel17.100         unassigned      YES manual up                    up
Port-channel17.101         unassigned      YES manual up                    up
Port-channel17.102         unassigned      YES manual up                    up
Please advise?

Hello Sande,
That is correct! Please mark this question as answered so future users having a similar problem can learn from your
solution.
Regards,
Julio

Srp521w ethernet sub interfaces on WAN

Hi there,
Have followed the admin guide, and can setup this up fine, however what we're wanting is to turn off any IP connection for the main wan ethernet interface and only have the sub-interface have an IP connection method.
I can't see how you can turn this off, which is causing a double-up of dhcp requests being sent when using both the main/sub ethernet interfaces to use dhcp.
This has been tested on the 521w and 521w-u versions, and I've just used the latest firmware 1.2.4 on the u version.
How can this be configured so that there is only 1 WAN interface that is using IP (the sub interface)
Setting default routes to point to the sub interface doesn't make a difference.
Thanks in advance.
Chaz

Hi Chaz,
Configuring a static IP address on the main interface would be the only way to make it passive. The address to use here could be the same for all routers, as technically it will never be used.
Ensure that you set the interface default route for the WAN interface to the new sub interface.
See the following as an example (I use private 192.168.. addressing in my lab.)
Cheers
Andy

ACLs on Sub-Interfaces

Question on IP ACL...
If you configure an IP ACL for a subinterface on a router-on-a-stick, will it affect the entire physical interface or will it only affect the sub-interface, for which the ACL has been applied to? Just a thought that's been bugging me...Advanced thanks for your response...

Hi
It will only affect the sub-interface. The ACL applies only to the logical construct which is the sub-interface.
Hope that helps - pls do remember to rate posts that help.
Paresh

Cisco Prime Monitor Sub Interfaces

We are currently running Cisco Prime 2.1 and trying to monitor sub interfaces on our Cisco 7606. We can see the sub interfaces by:
Operate | Device Work Center
Select Quick Filter (to find the 7606)
Select Interfaces
Select IP Interfaces
The sub interfaces that we wish to monitor are displayed (with the above steps). However, when we try to select the interface to monitor, the sub interfaces do not appear:
Home | Detail Dashboard
Select Interface
Select the interface pull-down | All | 7606
We do not see the sub interfaces, only 2 interfaces are displayed. We do not see the interface GigabitEthernet4/7 at all. What are we missing here?

i couldn't find the appropriate MIB to monitor the call session

HSRP using sub-interfaces,

I'm planning a design that will need two 2950s to support 4 vlans. Non-local traffic will be routed out via one of two HSRP routers (one pair of vlans using router 1 as a primary, the other pair using router 2).
I've dug around the cisco documentation but can't find an answer to the following...
Does HSRP run ok over sub-interfaces?
For example, VLAN 1 default gateway will be HSRP (virtual) router's f0/0.1 x.x.x.x, VLAN 2 default gateway will be HSRP router's f0/0.2 x.x.x.x, etc.
Any ideas?

Hi Dwatson,
YES, HSRP supports on sub-interfaces also & there wouldn't be any problems.YES the default gateway would be the HSRP standby ip address specified on the sub-interface for the vlans.
eg.
Router A
interface FastEthernet0/0.1
description ***ABC***
encapsulation dot1Q 1
ip address 172.16.1.2 255.255.0.0
standby 1 ip 172.16.1.1
standby 1 timers 5 15
standby 1 priority 108
standby 1 preempt
Router B
interface FastEthernet0/0.1
description ***ABC***
encapsulation dot1Q 1
ip address 172.16.1.3 255.255.0.0
standby 1 ip 172.16.1.1
standby 1 timers 5 15
standby 1 priority 109
standby 1 preempt
Note donot give any ip address on the fastethernet interface.
interface fasthethernet 0/0
no ip address
hope this helps.
rate this post if cleared

Sub-interface Removal

We have created a Gigabitethernet sub-interface on a router, But when removing this with command :-
Router(config)#no int gig2/3.1
It is not removed and still showing in interface list with "deleted" status (i.e Gi2/3.1 deleted down).
Please share the process for permanently removing the sub-interface from list.
Thxns

Txns..Srry but last querry now.I have created a sub-interface Gig2/3.1 with configs.Router#sh run int Gig2/3.1
Building configuration...Current configuration : 186 bytes
interface GigabitEthernet2/3.1
description CONNECTED TO NetCore
encapsulation dot1Q 99
ip address 172.50.140.1 255.255.255.252
endBut
with this configs, The remote end IP of this interface (172.50.140.2)
was reachable but there are drops(approx 30 drops) on the same after
every 40-50 replies. one of my freind suggested me for configuring
below commands under sub-interface(but he seems to be confused about
the purpose of this commands).ip rip send version 1 2
ip rip receive version 1 2After
executing abne cmmds , now there is no drops. What these commds are
doing wht is the purpose of the command, after executing these why ping
/ reachability drops problems rectified. is this standard to configure
this commands under sub-interface...? pls***
Hi,
Those commands are useful to send and recieve RIP version to be sent or recive in interface with counter part neighbour.
To control which RIP version an interface sends, use one of the following commands in interface configuration mode:
ip rip send version 1 2 Configure an interface to send RIP Version 1 and Version 2 packets.
Similarly, to control how packets received from an interface are processed, use one of the following commands in interface configuration mode:
ip rip receive version 1 2 Configure an interface to accept either RIP Version 1 or 2 packets.
Hope to Help !!
If helpful do rate the useful post
Ganesh.H

Do the sub-interface of ASA firewall has limit of bandwidth

Similar Messages

Maybe you are looking for