11-21-2013 08:28 AM - edited 03-11-2019 08:08 PM
Hello,
I have the following situation, and not sure if the ASA can do this or not?
We have just ordered Comcast Ethernet [Fiber] service. They'll be installing a managed switch [Layer 2]. They'll be handing off an IP of x.x.138.114/30 to one of our devices. They're requiring a Layer 3 device [Router or Switch]. They have given us a range of IP's to use for internal servers, etc. of x.x.139.1/27.
So, the questions I have are:
Thanks in advance!
11-21-2013 09:28 AM
1. Yes it can
2. Yes, configure the /30 on the outside interface. You don't need to enter x.x.139.1/27 in the routing table. That address space is being routed down to you from your ISP. When you create your NAT's from the /27 address space the ASA knows that it is on the outside (via your NAT statement) and will respond to ARP's.
Hope it helps.
11-21-2013 10:19 AM
Collin, thanks very much! I was close to buying a router to put in between, but looks like I'm all set...
Thanks again!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide