topic Re: ASA Outside Interface in Network Security

ASA Outside Interface

estelamathew — Mon, 11 Mar 2019 18:28:32 GMT

Hello Dears,

Can i use ASA outside interface public IP for servers in DMZ to publish on internet definately i will use different port number for differnt servers and also the same interface IP can i use for remote vpn.

Thanks,

Re: ASA Outside Interface

Jennifer Halim — Fri, 20 Aug 2010 12:24:39 GMT

Yes, definitely you can.

An example for your reference:

Outside public ip address is 100.1.1.1

DMZ web server ip address is 172.16.1.1

DMZ mail server ip address is 172.16.1.5

You are hosting web server and mail server on your DMZ for example

static (dmz,outside) tcp interface 80 172.16.1.1 80 netmask 255.255.255.255

static (dmz,outside) tcp interface 25 172.16.1.5 25 netmask 255.255.255.255

Assuming you are using ASA version 8.2 or below.

Hope that helps.

Re: ASA Outside Interface

Nagaraja Thanthry — Fri, 20 Aug 2010 12:27:09 GMT

Hello,

Yes, you can use the outside interface IP for publishing services. You need

to use static PAT for this. Please make sure that there is no port conflict.

Regards,

Re: ASA Outside Interface

estelamathew — Fri, 20 Aug 2010 12:49:58 GMT

Hello,

Also i can use the same for remote access vpn, for users to connect from their house.

Thanks,

Re: ASA Outside Interface

Nagaraja Thanthry — Fri, 20 Aug 2010 12:57:37 GMT

Hello,

Yes, you can use the same IP for remove VPN as well as long as you are using

IPSec. If you are using WebVPN, please make sure that you are not using port

443 (HTTPS) for any other purpose on the outside interface (including ASDM).

Regards,