We are in process of migrating to different ISP thus we have to change the Public IP Addresses.
I have no issue changing inside and outside ip address but the servers in the DMZ are the issue.
We want clients access the DMZ servers from new and current ISP than turn the current one off after about a month or so.
My idea is assign new IP address for inside and outside interfaces and connect the DMZ in to the existing DMZ.
current FW:
inside: 192.168.1.1/24: vlan 192
outside: 10.1.1.1/24: vlan 10
dmz: 172.16.1.1./24: vlan 172
new FW:
inside: 192.168.20.1/24: vlan 168
outside: 10.2.2.2/24: vlan 20
dmz: 172.16.1.2/24 vlan 172
do you see any issue configuring FW like this? ACL and NAT rule will be simlar where outside clients will be reaching the same DMZ servers using different outisde IP addresses. I have ASA5520
ie)
10.1.1.10 -> 172.16.1.10
10.2.2.10 -> 172.16.1.10
