Solved: If the IP is part of the same

Chad Campbell · ‎11-02-2015

Guys,

Hello I have a quick question, I have a 5506 that I am going to create a site to site VPN with, but I have a Meraki access point, that needs external access ony. My ISP gave me 5 public IPs, I was wondering how would I be able to use it, would I just create a separate VLAN and statically configure the IP address on the AP?

The IP they gave me, is not my default gateway on the ASA.

Jon Marshall · ‎11-02-2015

If the IP is part of the same range as the outside interface IP you won't be able to do that.

If it is just give the AP a private IP and use NAT on the firewall ie. that IP does not need to be assigned to any interface.

If the AP has to have the public IP assigned directly to it and it is part of the same IP subnet you have a problem if you want to keep your firewall in routed mode.

Jon

View solution in original post

Jon Marshall · ‎11-02-2015

If the IP is part of the same range as the outside interface IP you won't be able to do that.

If it is just give the AP a private IP and use NAT on the firewall ie. that IP does not need to be assigned to any interface.

If the AP has to have the public IP assigned directly to it and it is part of the same IP subnet you have a problem if you want to keep your firewall in routed mode.

Jon

ASA and public IP