topic ASA 5506-X - multiple static IPs in Network Security

ASA 5506-X - multiple static IPs

Michigan — Fri, 21 Feb 2020 15:10:09 GMT

Hey. I have problem with ASA config.

My network looks like this:

- WAN connected to the router (EdgeMax PRO) to eth0.
- router (eth1) connected to the server (DELL R410).
- in the router on eth1 I have configured the entire class /24 of IPs

Both the server and the router are configured with static IP (without DHCP).

I want to enable Cisco ASA 5506-X with FirePOWER Services between the router and the server.
Unfortunately, I have a problem with configuring the firewall. 
How can I configure a firewall to support 256 static IPs?

Wiring looks like that:

Re: ASA 5506-X - multiple static IPs

Dennis Mink — Fri, 19 Jan 2018 12:46:49 GMT

I dont understand what you mean by "the firewall to support 256 static IPs"?

Re: ASA 5506-X - multiple static IPs

Karsten Iwen — Fri, 19 Jan 2018 13:02:40 GMT

You could configure the ASA to run in transparent mode. It's like a L2-switch that also runs a firewall. If your goal is not to change the infrastructure but still protect the server, then this will be the easiest approach.

Re: ASA 5506-X - multiple static IPs

Michigan — Fri, 19 Jan 2018 13:48:40 GMT

Thank you. Yes this is exactly what I want to do. I do bot want to change anything in my router/server config. I just want to put a firewall between the server and the router. How can I do it in the simplest way?

I found this but it is complicated.
https://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/general/asa-general-cli/interface-transparent.html