I inherited a cisco ASA, I never really had to manage one before. But, I need to modify an existing tunnel to add IP addresses to both the local and remote traffic selector, specifically there are already object groups for local ip addresses in the tunnel and remote ip addresses in the tunnel and I will be adding IPs to both those groups so they can communicate over the tunnel.

There are some sensitive applications communicating over this tunnel, will modifying the tunnel cause an interruption in traffic over the tunnel or should I be able to add things to this tunnel without interruption?

New contributor
person is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
  • How are you planning to do it? Adding rules to the acl shouldn't break anything, but changing the acl or any other part of the tunnel configuration will cause it to drop. (each ACL is it's own SA, so adding ACLs shouldn't drop existing SAs. But this should be tested offline first -- it may reset to communicate the new ACL) – Ricky 2 days ago
  • The ACL for the VPN has two object groups, and I'll be adding IPs to the object groups. So I wont be modifying the ACL directly, but I will be modifying the object groups referenced by the ACL – person yesterday

Your Answer

person is a new contributor. Be nice, and check out our Code of Conduct.

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.