Public IP behind the ASA

[angel-moon]

Hello,

Running 8.2 on a 5520 with. We have a device that neds the public IP address actually on the device itself but we have translations for all other devices. We have several network interfaces available on the ASA. Is there any way to let this device have a public IP on itself while sitting behind the ASA?

Thanks in advance! All replies rated

[srue]

does the rest of the subnet to which this particular IP address belong to sit outside the ASA - or asked another way, is the ASA outside interface part of this IP block?

[angel-moon]

Yes, it is within the same block as the rest of the IP addresses

[srue]

if the outside IP address of the firewall is on the same subnet then you will have problems putting this on the inside of the firewall.

can you put it in front of the firewall but maybe lock it down with ACL's from a router that might be infront of the firewall?