12-09-2008 12:30 PM - edited 03-11-2019 07:23 AM
We have a 5510 just put in with a public IP range of 209.x.x.x/29 and we are out of free IP addresses. Our ISP is unable to give us a larger range but has given us a seperate block of IP's 65.x.x.x/29. I am not sure how to program my 5510 to support the IP range. Do I need to give my outside int a secondary IP address? This new IP range will only be used for 1 to 1 nats. Do I need to create a static route or secondary default router, if so, how?
Solved! Go to Solution.
12-09-2008 12:33 PM
Jason
No you don't need a secondary address. As long as the ISP routes traffic for this new subnet to the outside interface of your ASA and they should be if they have allocated you that subnet then you can just use normal static statements + access-list entries to allow access to servers
eg.
static (dmz,outside)
Jon
12-09-2008 12:33 PM
Jason
No you don't need a secondary address. As long as the ISP routes traffic for this new subnet to the outside interface of your ASA and they should be if they have allocated you that subnet then you can just use normal static statements + access-list entries to allow access to servers
eg.
static (dmz,outside)
Jon
12-09-2008 12:37 PM
wow, that was fast. That makes sense, I'm going to confirm this with the ISP and run with it from there. Thank you for the quick response.
JB
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide