cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
542
Views
5
Helpful
3
Replies

ASA 5505 with dual ISP - With Public and Private address

HI ,

My Scenario as below

ASA5505 with Security Plus license and 8.4(5)

Outside has public address and natted for lan and dmz and done some static nat for local server

Now - Back link - only available with private address - backup link to isp router we can use only private address and nat will perform in the ISP.

Now how we can achive the tacking and static nat in this situation.

Expecting ur valuable comments on this

I gone through this document but it seems both the interface should have static public ip !!!

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

asa_backup.jpg         

3 Replies 3

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Mahadeer,

How are you doing?

Well even if you are using a private range is going to work.

The key information here is that you will be using the primary interface in order to send traffic and you will monitor it.

Now the backup or secondary link will come into place only if the primary link goes down! but for that to still provide connectivity to your network the ISP configuration should be set in such a way that it still can do the NAT required for your servers and that it can still route traffic back to your network.

For more information about Core and Security Networking follow my website at http://laguiadelnetworking.com

Any question contact me at jcarvaja@laguiadelnetworking.com

Cheers,

Julio Carvajal Segura

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi  Julio,

Thanks for your update, let me check in lab scenario and update to you with status.

Reg,

Mohamed Ismail

Hello Mahadeer,

My pleasure to help

Remember that we are here to help so show us that with some rating in our answers

For more information about Core and Security Networking follow my website at http://laguiadelnetworking.com

Any question contact me at jcarvaja@laguiadelnetworking.com

Cheers,

Julio Carvajal Segura

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Review Cisco Networking products for a $25 gift card