Public IP behind the ASA

Unanswered Question
Jul 31st, 2009
User Badges:


Running 8.2 on a 5520 with. We have a device that neds the public IP address actually on the device itself but we have translations for all other devices. We have several network interfaces available on the ASA. Is there any way to let this device have a public IP on itself while sitting behind the ASA?

Thanks in advance! All replies rated

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
srue Fri, 07/31/2009 - 05:31
User Badges:
  • Blue, 1500 points or more

does the rest of the subnet to which this particular IP address belong to sit outside the ASA - or asked another way, is the ASA outside interface part of this IP block?

angel-moon Fri, 07/31/2009 - 06:19
User Badges:

Yes, it is within the same block as the rest of the IP addresses

srue Fri, 07/31/2009 - 06:30
User Badges:
  • Blue, 1500 points or more

if the outside IP address of the firewall is on the same subnet then you will have problems putting this on the inside of the firewall.

can you put it in front of the firewall but maybe lock it down with ACL's from a router that might be infront of the firewall?


This Discussion