Link to home
Start Free TrialLog in
Avatar of c-h-r-i-s-t-o-p-h
c-h-r-i-s-t-o-p-hFlag for United States of America

asked on

Disable "IP LOCAL POOL" in Cisco ASA 5520 VPN

I have two ASA 5520 that currently has several pools / groups setup on it.

Refer to the code below. I would like to deactivate NAME1, NAME2, NAME3, and NAME4.

However i would like to leave NAME5 active.

Also, I want to leave the deactivated code in my config.

Ideas?
ip local pool NAME1 192.168.1.2-192.168.1.254 mask 255.255.255.0
ip local pool NAME2 192.168.2.2-192.168.2.254 mask 255.255.255.0
ip local pool NAME3 192.168.3.2-192.168.3.254 mask 255.255.255.0
ip local pool NAME4 192.168.4.2-192.168.4.254 mask 255.255.255.0
ip local pool NAME5 192.168.5.2-192.168.5.254 mask 255.255.255.0

Open in new window

Avatar of Les Moore
Les Moore
Flag of United States of America image

You can't really "deactivate" a pool. Either you assign the pool to a policy, or you leave it alone.
Just the act of defining the pool does not "activate" it anyway. You must select that pool to assign addresses in a VPN group policy.
Avatar of c-h-r-i-s-t-o-p-h

ASKER

What command assigns the pool to a policy?
ASKER CERTIFIED SOLUTION
Avatar of Les Moore
Les Moore
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial