topic External static ip setup for 5506-x asa in Network Security

External static ip setup for 5506-x asa

sp7412 — Fri, 21 Feb 2020 16:41:35 GMT

I'm trying to configure the outside interface of my 5506-x. I have a static ip from my ISP (Comcast) that I want to point to the outside interface of my ASA so that I can setup a VPN with a remote office.

Does the ASA support NATing (meaning that my comcast modem could point the external static ip to an internal ip for the ASA? Or do I need to set the static ip of the ASA to be the static ip from Comcast?)

Re: External static ip setup for 5506-x asa

balaji.bandi — Wed, 23 Jan 2019 16:34:46 GMT

best to have public Static IP to ASA Outside interface to minimize other issues around NAT-T

if not, you need to have static NAT from ISP router to ASA outside interface. so VPN users can connect to ASA.

example document to help :

https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/118996-config-asa-00.html#anc8

Re: External static ip setup for 5506-x asa

Sheraz.Salim — Wed, 23 Jan 2019 20:58:49 GMT

if i were you i do these steps.

1. you have a public static ip adress thats a plus point

2. on your modem setup a port forwarding to you ASA.

3 from the ASA create a anyconnect configuration and when it come to use a port no. use the port no you gave it to your ASA.

4. now when from the remote side you connect to your public ip address (6.6.6.6:8443) your router will forward the port no to your ASA and than you can connect to your anyconnect module.

let me know if you need help I have a similar setup at my home lab.