I have been allocated two non-contiguoius subnets by the ISP, am I right that there is no way to support two subnets on an outside ( e0 ) interface ?
Network Security
Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Adaptive Security Appliance, Secure Firewall Management Center, and Security Cloud Control.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Network Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AAA
(8) -
Access Control Server (ACS)
(6) -
Access List
(4) -
ACI
(10) -
Advanced Threats
(1) -
AMP for Endpoints
(1) -
AnyConnect
(3) -
APIs
(1) -
Appliances
(18) -
ASA
(1) -
ASR 1000 Series
(1) -
Branch Router
(2) -
Buying Recommendation
(84) -
Catalyst 2000
(1) -
Catalyst 3000
(2) -
Catalyst 4000
(1) -
Catalyst 6000
(1) -
Catalyst 8000
(1) -
Catalyst 9000
(2) -
Catalyst Switch
(2) -
Catalyst Wireless Controllers
(1) -
Cisco
(1) -
Cisco Adaptive Security Appliance (ASA)
(9,510) -
Cisco Bugs
(31) -
Cisco Cafe
(25) -
Cisco CLI Analyzer
(1) -
Cisco Cloud Services Router
(1) -
Cisco Defense Orchestrator (CDO)
(139) -
Cisco Firepower Device Manager (FDM)
(812) -
Cisco Firepower Management Center (FMC)
(2,909) -
Cisco Firepower Threat Defense (FTD)
(3,164) -
Cisco Press Cafe
(1) -
Cisco Secure Firewall Management Center (FMC)
(3) -
Cisco Secure Firewall Threat Defense (FTD)
(2) -
Cisco Security Manager (CSM)
(3) -
Cisco Software
(17) -
CISCO START ANZ
(1) -
Cisco Threat Response
(1) -
Cisco Vulnerability Management
(42) -
Cloud
(1) -
Cloud Security
(3) -
Community Bug or Issue
(1) -
Community Feedback Forum
(31) -
Community Ideas
(18) -
Compliance and Posture
(1) -
Crypto
(1) -
CSC Content with No Valid Community to Post
(1) -
CUBE
(1) -
CUCM
(1) -
Data Center Networking
(1) -
Device Admin
(13) -
EEM Scripting
(1) -
Emergency Responder
(1) -
Endpoint Security
(6) -
Enterprise Agreement
(1) -
Event Analysis
(258) -
FirePOWER
(1) -
Firepower Chassis Manager (FCM)
(2) -
Firepower Device Manager (FDM)
(16) -
Firepower Management Center (FMC)
(408) -
Firepower Threat Defense (FTD)
(221) -
Firewall Migration Tool (FMT)
(25) -
Firewalls
(1,171) -
FMC
(1) -
General
(2) -
Guest
(1) -
Identity Services Engine (ISE)
(9) -
IE3300
(1) -
Integrated Security
(8) -
Integrated Security Architecture
(1) -
Integrations
(3) -
Investigation
(2) -
iOS
(1) -
IPS and IDS
(6,567) -
IPS and IDS1
(1) -
IPS-IDS
(1) -
IPSEC
(1) -
ISE
(1) -
LAN Switching
(7) -
License
(319) -
MPLS
(1) -
Multicloud Defense
(2) -
Network Management
(90) -
Network Security
(2) -
Networking
(1) -
NFVIS
(1) -
NGFW Firewalls
(37,553) -
NGIPS
(1,872) -
Online Tools and Resources
(1) -
Optical Networking
(3) -
Optics
(1) -
Other Collaboration Topics
(1) -
Other Community Feedback
(4) -
Other Firewalls
(1) -
Other NAC
(18) -
Other Network
(1) -
Other Network Security Topics
(10,769) -
Other Networking
(8) -
Other Routers
(9) -
Other Routing
(24) -
Other Routing and Switching topics
(2) -
Other Security
(1) -
Other Security Topics
(18) -
Other Switches
(11) -
Other Switching
(4) -
Other VPN Topics
(1) -
Passive Identity
(1) -
Physical Security
(20) -
Policy and Access
(2) -
Prioritization
(2) -
Remote Access
(2) -
Room Endpoints
(1) -
Routing Protocols
(7) -
SD-WAN Security
(1) -
Secure Network Analytics
(1) -
Security
(3) -
Security Management
(624) -
Segmentation
(3) -
Service Providers
(1) -
Small Business Routers
(4) -
Small Business Security
(2) -
Sourcefire
(2) -
Support
(2) -
Threat Containment
(6) -
Threat Defense
(1) -
Unified Computing System (UCS)
(1) -
Voice Gateways
(1) -
VPN
(24) -
VPN and AnyConnect
(1) -
Vulnerability Management
(41) -
WAN
(7) -
Web Security
(5) -
Webex Teams
(1) -
Wired
(3) -
Wireless Security
(1)
- « Previous
- Next »
Forum Posts
I don't think I'll need nat enabled, but wanted to double check:My ASA that I'm configuring is behind another device that actually NATs the traffic for us. I have a public address assigned to my outside interface on the ASA and a private on the insid...
Using Tftpd32 TFTP server.Unable to load any software to any ASA firewall on the networkAccessing tftp://10.15.4.55/asdm-603.bin...WARNING: TFTP download incomplete!%Error reading tftp://10.15.4.55/asdm-603.bin (Unspecified Error)Tftpd32 works for al...
I'm creating statics like:static (dmz,outside) public dmz maskI thought I would just open the ports in the acl, but I know I can do something like:static (dmz,outside) public ip 80 dmz ip 80 netmaskIs this the "better" way of doing it, or does it rea...
Resolved! asa dmz and acls
I don't believe I will, but when creating acls in the dmz, I'll have to all the device in the dmz access to the internal network.permit ip dmz-host internal-hostWhy don't I have to create an entry for the dmz host on an acl that's applied to the insi...
Hello All,We are trying to upgrade the signature of an ASA-SSM-10 module from S372 to S388 and we are getting the same error: Error: execUpgradeSoftware : Target system does not have a valid license to process the config with the version S361.1.Pleas...
Hi All,This one has really got me scracthing my head. Imagine three interfaces INSIDE, OUTSIDE and DMZ at security levels 100, 10 and 100.Access rules are in place to permit traffic from INSIDE to DMZ and also INSIDE to OUTSIDE. There is also a 10.0....
folkscan an asa have two separate external interfaces, each using a different NAT, both connected to the same isp routeri need to route traffic from my internal network through the asa and filter it based on destination address - all for http traffi...
HelloHave An ASA with the following statements:ASA Version 7.2(4)9 route Inside 10.1.1.50 255.255.255.255 Y.Y.Y.Y 1route Inside 10.1.1.51 255.255.255.255 Y.Y.Y.Y 1route Outside 10.1.0.0 255.255.0.0 X.X.X.X 1Made a Change and only add The rule:route O...
I am a contractor with a client that is upgrading 7 Cisco ASA 5505's from 10-user license(s) to 50-user license(s). I have never run into a client of mine who didn't purchase an unlimited licensed Cisco product and have no clue what the procedure is...
how do i restore the default configurationi on a cisco 3002 VPN
Hi All, I'm new to the IDS/IPS and I have a basic question...I have an IPS Sensor 4240 configured as an IDS with all the default settings... My questions is:Will the Sensor alert the ASAs or routers when there's a signature match to apply an ACL for ...
It appears the S387 signature set contains quite a few new signatures. Many of the signatures are disabled by default, and the ones that I checked are for older vulnerabilities.Is this simply a back-fill of older vulnerabilities using the newer engin...
Hi All,I have an IPS module in a ASA via which we are planning to send l2tp traffic. Would it be possible for the IPS to insoect this traffic as it normmaly does with other traffic ?Thanks
Resolved! ACLs and DMZ - Brain-freeze
All,I'm setting up acls for the inside, dmz1, dmz2 and external.My question is:I have a host on the inside that needs to get to the dmz. I have an acl on the inside and I'll need to permit this host to the dmz. I'll also need to create an acl on the ...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 07-16-2025 04:21 AM | ||
| 07-06-2025 01:40 PM | ||
| 07-04-2025 01:59 AM | ||
| 06-19-2025 07:32 AM | ||
| 06-17-2025 01:07 PM |
New solutions
Top Solution Authors
| User | Count |
|---|---|
| 10 | |
| 5 | |
| 5 | |
| 2 | |
| 1 |
