Changing public IP

paulc · ‎11-20-2007

After many years with the same ISP, we are switching. We will not be able to use the same public IP address. For those of you who have had to completely review your firewall rules, is there any easy way or documentation on doing this?

JORGE RODRIGUEZ · ‎11-20-2007

My friend I ran into the exact same scenario, there is no other way other than conduct a thorough fw configuration isnpection, however, since you are chanching ISP which is mosutly your public IP block, glocal NAT, static NATs new defualt routes etc.. you can do the complete migration from PDM/ASDM, when chnaging these PDM automcatically updates rules, but good to have a backout plan or script for CLI as other resource of changing configuration . If you have any particular question Im sure someone will provide some hints.

Rgds

Jorge

Jorge Rodriguez

sbaddipudi · ‎11-20-2007

The way we designed it, we have one vlan that faces the internet. We also have redundant ISPs as one of the requirements. For us that is not a huge load to migrate between ISPs.

Satya

paulc · ‎11-21-2007

Thanks Jorge & Satya. I was afraid it was going to be pretty much of a manual process. Luckily, we are a small org with less than 10 VPN's so, hopefully, downtime will be minimal.

johnd2310 · ‎11-21-2007

Hi,

If possible, you could make it easier by getting a new box, configure for the new isp and then cutover with minimal downtime. I always find these exercises a good time to upgrade hardware as well.

Thanks

John

**Please rate posts you find helpful**

paulc · ‎11-21-2007

:) Thanks, John, that would be great but the $ just aren't there. We're able to do the switch because it's basically just paying a different vendor. I'd love to swap out the 515E's but I guess that'll have to wait.