Disable "IP LOCAL POOL" in Cisco ASA 5520 VPN

Posted on 2011-05-10
Last Modified: 2012-05-11
I have two ASA 5520 that currently has several pools / groups setup on it.

Refer to the code below. I would like to deactivate NAME1, NAME2, NAME3, and NAME4.

However i would like to leave NAME5 active.

Also, I want to leave the deactivated code in my config.

ip local pool NAME1 mask
ip local pool NAME2 mask
ip local pool NAME3 mask
ip local pool NAME4 mask
ip local pool NAME5 mask

Open in new window

Question by:c-h-r-i-s-t-o-p-h
    LVL 79

    Expert Comment

    You can't really "deactivate" a pool. Either you assign the pool to a policy, or you leave it alone.
    Just the act of defining the pool does not "activate" it anyway. You must select that pool to assign addresses in a VPN group policy.

    Author Comment

    What command assigns the pool to a policy?
    LVL 79

    Accepted Solution

    tunnel-group <GROUP> general-attributes
     address-pool NAME


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
    If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    7 Experts available now in Live!

    Get 1:1 Help Now