Forgive me if this question has been asked in other forms before but I have not been able to find a recent answer.
Does the Cisco ASA platform support /31 RFC 3021 addressing on it's interfaces in any of the latest versions of code. We work regularily with a service provider who's default offering is /31 addressing for public addresses and we always have to request at least a /30 address space for the ASA to work with.
It would be really useful to allocate a /31 address to the ASA interface.
As a secondary question linked to this - My understanding is as follows:-
1. For the ASA to terminate VPNs, the public IP address must be the actual outside interface address on the ASA terminating the VPNs.
2. All other firewall activities handling traffic via NAT could use an RFC1918 address on the outside interface with the SP provided public address just configured as NAT address/object NAT.
Are items 1 and 2 above correct statements ?
Thanks is advance for any replies and forgive me if these are rather basic questions.
Regards,
Robert