topic Re: Multiple ISP Public IPs over a single circuit in Network Security

Multiple ISP Public IPs over a single circuit

ManInTheMiddle — Wed, 15 May 2019 13:31:20 GMT

I have 2 public IPs coming over a single circuit terminating in a firewall (Cisco ASA 5525)

One is for a SIP trunk and one is for Internet connectivity.

I am wondering how to configure the firewall interface to use both Public IPs on the single interface. Would it be sub-interfaces?

Re: Multiple ISP Public IPs over a single circuit

balaji.bandi — Wed, 15 May 2019 16:17:00 GMT

You do not required to configure IP address to interface, if they are routed to your FW interface, you can do NAT based on the requirement.

if this was not the case explain, how they routed ?

Re: Multiple ISP Public IPs over a single circuit

Marius Gunnerud — Wed, 15 May 2019 19:02:59 GMT

You can use proxy ARP with NAT, then you will not need to configure the IPs on the physical interface. Optionally you could configure the IP for internet traffic on the interface and NAT the SIP IP

Re: Multiple ISP Public IPs over a single circuit

ManInTheMiddle — Thu, 16 May 2019 10:35:32 GMT

I am not sure how the ISP are routing but originally it was a single public IP for internet connectivity to the FW interface and we had to add second public IP to that link for a SIP trunk.

I think NAT the second IP for the SIP trunk is the way forward.

Thank you for your reply.

Re: Multiple ISP Public IPs over a single circuit

ManInTheMiddle — Thu, 16 May 2019 10:37:56 GMT

This is exactly what I need to do. My confusion was coming from the physical interface being originally configured with a public IP just for Internet and additional IP added for SIP trunk and had me scratching my head how both Public IPs will come into that interface.

Thanks for the reply.