https://community.cisco.com/t5/network-security/5510-with-multiple-static-ip-ranges/m-p/1116591#M892525 <HTML><HEAD></HEAD><BODY><P>Jason</P><P></P><P>No you don't need a secondary address. As long as the ISP routes traffic for this new subnet to the outside interface of your ASA and they should be if they have allocated you that subnet then you can just use normal static statements + access-list entries to allow access to servers</P><P></P><P>eg. </P><P></P><P>static (dmz,outside) <NEW public="" ip=""> <REAL server="" ip=""> netmask 255.255.255.255</REAL></NEW></P><P></P><P>Jon</P></BODY></HTML> Tue, 09 Dec 2008 20:33:46 GMT Jon Marshall 2008-12-09T20:33:46Z https://community.cisco.com/t5/network-security/5510-with-multiple-static-ip-ranges/m-p/1116590#M892523 <P>We have a 5510 just put in with a public IP range of 209.x.x.x/29 and we are out of free IP addresses. Our ISP is unable to give us a larger range but has given us a seperate block of IP's 65.x.x.x/29. I am not sure how to program my 5510 to support the IP range. Do I need to give my outside int a secondary IP address? This new IP range will only be used for 1 to 1 nats. Do I need to create a static route or secondary default router, if so, how?</P> Mon, 11 Mar 2019 14:23:23 GMT https://community.cisco.com/t5/network-security/5510-with-multiple-static-ip-ranges/m-p/1116590#M892523 j.bourque 2019-03-11T14:23:23Z https://community.cisco.com/t5/network-security/5510-with-multiple-static-ip-ranges/m-p/1116591#M892525 <HTML><HEAD></HEAD><BODY><P>Jason</P><P></P><P>No you don't need a secondary address. As long as the ISP routes traffic for this new subnet to the outside interface of your ASA and they should be if they have allocated you that subnet then you can just use normal static statements + access-list entries to allow access to servers</P><P></P><P>eg. </P><P></P><P>static (dmz,outside) <NEW public="" ip=""> <REAL server="" ip=""> netmask 255.255.255.255</REAL></NEW></P><P></P><P>Jon</P></BODY></HTML> Tue, 09 Dec 2008 20:33:46 GMT https://community.cisco.com/t5/network-security/5510-with-multiple-static-ip-ranges/m-p/1116591#M892525 Jon Marshall 2008-12-09T20:33:46Z https://community.cisco.com/t5/network-security/5510-with-multiple-static-ip-ranges/m-p/1116592#M892531 <HTML><HEAD></HEAD><BODY><P>wow, that was fast. That makes sense, I'm going to confirm this with the ISP and run with it from there. Thank you for the quick response.</P><P>JB</P></BODY></HTML> Tue, 09 Dec 2008 20:37:17 GMT https://community.cisco.com/t5/network-security/5510-with-multiple-static-ip-ranges/m-p/1116592#M892531 j.bourque 2008-12-09T20:37:17Z