topic FTD second IP Address in Network Security

FTD second IP Address

elopraha1 — Fri, 05 Nov 2021 22:17:01 GMT

I am configuring Cisco FTD 1100. Need to use three IP addresses on outside interface. Is there nay way how to do that?

Thank You

Jaromir

Re: FTD second IP Address

Marius Gunnerud — Sat, 06 Nov 2021 06:49:33 GMT

What will you be using the IPs for? NAT is one option

Re: FTD second IP Address

elopraha1 — Sat, 06 Nov 2021 18:49:44 GMT

I will use it for SMTP server.

Re: FTD second IP Address

Marius Gunnerud — Sat, 06 Nov 2021 18:59:43 GMT

Then you would only need to NAT the second public IP to the SMTP server. If the second public IP is not in the same subnet as your FTD outside interface then you need to make sure that your ISP is routing that IP / subnet towards your FTD, then NAT will take care of the rest. The interface needs to be configured to perform proxy ARP, but this is enabled by default. So, unless you have made changes to this you should be all good to just configure NAT.

In addition you will need to configure access control policy rules to allow traffic to the SMTP server on port tcp/25.

Re: FTD second IP Address

elopraha1 — Tue, 09 Nov 2021 14:37:44 GMT

Thank You
it Works. Nat has to be Auto NAT .

Jaromir

Re: FTD second IP Address

sherali mamatkarimov — Sat, 01 Jun 2024 16:35:18 GMT

can you share with config as image?