How to add new routed subnet to Firepower 2110

EMP — Wed, 18 Nov 2020 10:52:50 GMT

We have been assigned a new routed IP subnet by our ISP in addition to the exiting one. This /29 subnet needs to be added to the FirePower appliance so we can then use it for additional NATs to be defined.

I cant find any documentation on this and dont know if I should add as a subinterface (which didnt work) or just add the IP range and create a NAT policy (didnt seem to work either).

Does anyone know how to add an additional subnet that is routed to the existing external interface of the appliance?

Re: How to add new routed subnet to Firepower 2110

Rob Ingram — Wed, 18 Nov 2020 11:09:53 GMT

Hi @EMP

The ISP needs to route that /29 network to the outside interface of your FTD. On the FTD you just need to define a NAT rule using one of the new IP address and configure the ACP to permit traffic.

If you are still having issues, please provide a screenshot of your configuration.

HTH

topic Re: How to add new routed subnet to Firepower 2110 in Network Security

How to add new routed subnet to Firepower 2110

Re: How to add new routed subnet to Firepower 2110