topic Adding a second public subnet to an ASA 5510 in Network Security

Adding a second public subnet to an ASA 5510

tahequivoice — Mon, 11 Mar 2019 10:26:38 GMT

I have a customer who needs more address space, and instead of readdressing everything on the ASA, is it possible to use the fourth ethernet port as a second public interface to the internet? Both interfaces will terminate onto a 2610 through a switch with the second subnet as secondary on the e0/0 port. Name it outside2 with security 0, and have the static nat statements for the internal servers in that subnet?

Re: Adding a second public subnet to an ASA 5510

acomiskey — Thu, 07 Jun 2007 14:50:49 GMT

It's not necessary to use another interface, just make sure the isp routes the new subnet to your ASA, write the statics and you'll be good to go.

Re: Adding a second public subnet to an ASA 5510

tahequivoice — Thu, 07 Jun 2007 14:54:03 GMT

heheh I'm the ISP! 🙂 So if I just add static translations in the new range, and have the gateway address on the router as secondary, I should be able to route through to them?

Re: Adding a second public subnet to an ASA 5510

acomiskey — Thu, 07 Jun 2007 15:06:03 GMT

Well it should be a piece of cake then, haha. Yes, that should be fine.

Re: Adding a second public subnet to an ASA 5510

tahequivoice — Thu, 07 Jun 2007 15:33:40 GMT

OK, I am going to lab test it now with another 5510 I have just finished with for another customer. I'll get back to ya.

Re: Adding a second public subnet to an ASA 5510

050878james — Thu, 07 Jun 2007 15:48:28 GMT

Hello tahequivoice, if You`re an ISP 😉 can I ask You to take a look on the post in the link below ? maybe You can give me an answer ?

I am having big problems to find a solution on my question. Since this is forum category for FIREWALLING, I will not post the question here, but just the link:

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=LAN%2C%20Switching%20and%20Routing&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddeb9aa

It will not take a long time for You to read trough the messages ok ?

And if someone of You other boys who replied to tahequivoice know the solution, so please help !! Help this poor soul, I was looking for this solution long time, without success.

Thank you !!

Best regards

James

Re: Adding a second public subnet to an ASA 5510

tahequivoice — Thu, 07 Jun 2007 16:59:52 GMT

I replied to your question, hopefully it is what you are seeking.

Re: Adding a second public subnet to an ASA 5510

tahequivoice — Thu, 07 Jun 2007 17:00:49 GMT

Well, I can see the arp entry, but I am not able to ping the machine. I have an ACL that allows all traffic through to the box.

Re: Adding a second public subnet to an ASA 5510

tahequivoice — Thu, 07 Jun 2007 18:12:30 GMT

Confirmed. The reason it didnt work the first time was I fat fingered the inside IP, the second test I found it needs to be directly connected to the router so it picks up the ARP entry. I had it running through a Vlan in the first.