I have an ASA 5508-X and a broadband cable modem. Used the next available public IP from the cable carrier’s /29 block for the firewall, set the route and everything worked fine, pings inbound and outbound, etc.
Problem starts when we added the Velo box. The WAN carrier had two options, using their own /29 block addresses, or our private addresses. Eventually went with our 10.0.0.0 addressing.
With that new box in the mix, I can’t find a configuration that lets the firewall ping the router or the web. But when we use an internal address on another of the LAN ports of the SDWAN box, it works fine.
Suggested config, presuming the Velo SDWAN box is 10.0.0.1 and the firewall is 10.0.0.2? Is this even doable, without another switch in between? Maybe my NAT was incomplete?
Thanks in advance!
