- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-14-2011 07:40 AM - edited 03-11-2019 03:02 PM
I currently have an ASA5510 that has it initial IP block being provided by the DC, recently the company has had a need for a new IP block which has been given to us by the same DC but is also discontiguous from our original block. I have ponder best possibilities to configure the outside interface to accept the new block but wanted to get some other opinions. Any ideas would be greatly appreciated.
Thanks!
Solved! Go to Solution.
- Labels:
-
NGFW Firewalls
Accepted Solutions

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-14-2011 07:44 AM
Hi Nick,
You can use them until and unless those public ip's point towards the ASA outside interface by your service provider, it shoudl be fine, you can configure them on the ASA.
Thanks,
Varun
Varun Rao
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-14-2011 08:47 AM
Yes that will work SP route pointing to your interface will bring traffic upto your outside interface of Firewall and based on your requirement you can allow traffic by using ACL. Nothing much is really required.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-14-2011 07:44 AM
Hi Nick,
You can use them until and unless those public ip's point towards the ASA outside interface by your service provider, it shoudl be fine, you can configure them on the ASA.
Thanks,
Varun
Varun Rao
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-14-2011 08:29 AM
So essenstially nothing fancy really needs to be done so the ASA recognizes the new block. As long as the SP routes that block to the external inteface of my ASA and I create rules to allow the IP block through it will work?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-14-2011 08:47 AM
Yes that will work SP route pointing to your interface will bring traffic upto your outside interface of Firewall and based on your requirement you can allow traffic by using ACL. Nothing much is really required.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-14-2011 09:05 AM
alright great, guess i was over thinking it. I will give this a shot with some acl rules and get back shortly.
thanks.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-14-2011 09:08 AM
Sure no problem, let me know if you face any issues.
Varun
Varun Rao

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-14-2011 08:47 AM
Yes Nicholas, thats correct, you just need to do the configuration that you have done for the previous /block on the ASA.
Hope that helps.
Thanks,
Varun
Varun Rao
