Internet directly on ASA device?

[ramkunta]

Hi all,

I need a suggestion on something very basic. There is a requirement for having a Site-to-Site tunnel.

Instead of terminating internet connectvity on a cisco router and connecting router to an ASA firewall, can we terminate the internet connectivity directly on the Firewall and have a site-to-site tunnel? Will there be any disadvantages if we do this? Kindly help me understand.

Regards,

Ram

[Jouni Forss]

Hi,

There should be no problems doing this.

It depends totally on the media which is used to connect the ISP to your firewall.

If you have some xDSL type connection you would traditionally use a modem/router in bridged mode and have the public IP address directly on the ASA either statictly configured or with DHCP depending how your connection with ISP is.

I would see having the public IP address directly on the ASA the preferred setup. If the public IP address was on the router you would have to do NAT and access control on 2 devices and it would needlesly complicated the setup.

- Jouni