configuring ASA5505

Unanswered Question
Apr 8th, 2009

How to best secure an inside network? ASA5505's outside interface has a static public IP. The following is the physical topology.

DSLmodem/router <> ASA5505 <> Linksys wireless router <> wireless users.

The DSL modem will be in bridge mode. The Linksys will provide DHCP to the internal users.

1. Is it best to assign a public IP to ASA's inside interface?

2. Linksys wireless would be connected to a switch port of the ASA and the remaining switch ports will be disabled.

3. PAT would be done on the Linksys.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
roshan.maskey Wed, 04/08/2009 - 17:15


Normally Cisco recommends router at Publicly connected network for typically SMB-Large organization. But, connected public ip to ASA interface is not bad either.

You can have DHCP done y Linksys wireless device. But, I strongly recommend doing NAT at ASA5505. Cisco ASA is good for NAT.

If you want to have further strict policies for http, ftp, esmtp traffic, you can create application policy map and use them, use regex to block websites or web messengers.


This Discussion