topic Firepower RAVPN with Outside interface using private address in Network Security

Firepower RAVPN with Outside interface using private address

jdonjuanl — Fri, 21 Feb 2020 17:27:59 GMT

Hello, we are implementing a RAVPN solution with Firepower and the scenario is:
-We have a x.x.x.x/30 for RAVPN solution
-Firepower Outisde interface is using private address y.y.y.y/30 and is connected to a Internet Router inside interface
-Internet Router is also using private addressing for inside and outside interfaces
-Internet Router has a static route indicating the x.x.x.x/30 lives in the firewall and the next-hop is the Firepower Outside interface.

LAN <---> FP <----> Router <-----> Internet

It is possible to deploy RAVPN in this scenario?
Can anyone send any documentation to implement it?

Regards

Re: Firepower RAVPN with Outside interface using private address

jdonjuanl — Wed, 08 Apr 2020 22:25:54 GMT

As far I can tell it is not possible

Regards

JCD

Re: Firepower RAVPN with Outside interface using private address

Cristian Matei — Thu, 09 Apr 2020 08:40:14 GMT

Hi,

If you can't assign the public IP to the FTD directly, you can configure the router in front of the FTD to perform NAT, and make the FTD private address visible as the public address to the Internet.

Regards,

Cristian Matei.