cisco router 1841 and asa 5510

[veeru.pvr]

we have cisco2841 router and asa5510

they have connected in the following way

in the above scenario we got the two subnets of ipaddresses from ISP   pubip/30 and pubip's/29 ....

my doubt  is ..because everything is done in ASA 5510 firewall why do we need router...can i remove router...

[Ali Norouzi · Accepted solution]

Having a seperate device in edge of the network is usefull when it connects to several devices inside the internal network. For example if have more than one ASA or other routers that needs internet directly. In your case even ASA5510 is more powerfull in backplane than 1841 so you can remove it.

The other case is that if you want to have redundant ASA then it would be better to have a router in the edge.

What's the ASA image you are using?

[veeru.pvr]

thank you for response,

we are not going to have any redundant devices...we are using  8.2(2) image

for knowledge sake...if we have other products like TMG or Juniper firewall and at the Edge 1841 is this preferable..?

[ktwaddell]

Hi

Having a router before a firewall is normally because of things like ADSL or you need to do some BGP stuff to ISP and has already said more than one firewall etc.

Thanks

Kev

[veeru.pvr]

thanks