s there a constraint in models such as 5516x in regards to set 2 interfaces with 2 public addresses and make PNAT or SNAT between, with access lists, VPN connections and other most common things that you set in today's firewalls? you can use one interface on the ASA 5516-x as outside and assign public ip address to it. you can do NAT eith PNAT or SNAT for the servers you have in DMZ/INSIDE or you can use the other spare public ip for this purpose. remember each network is different and have different solution. once you gather all the information than you can ask us what your desire and we are here to help you. Will firmware block me of creating interface with 2 public interfaces and NAT between them or there are no constraints...? depends what are you requirement. I am not going in deep detail when there is no network design . Also, If I remember, Cisco ASA's DHCP server have limit to 254 IPs per network or did they fixed that and allow to have larger network than /24? (I know that I have possibility of DHCP-relay to dedicated DHCP server, but I would like to know if the same constraint is still applicable) DHCP-relay is support in ASA. also does the DHCP though.
... View more
.jpg "VIP Collaborator"){kind=icon}
.jpg "Hall of Fame Master"){kind=icon}
