Cisco Unified Mobility Advantage / Cisco ASA Deployment Question

Unanswered Question
Jan 18th, 2010
User Badges:

Hi all,


I was wondering, whether if we have to configure ASA' s outside interface with a real IP address according to the configuration guide below ?


http://www.cisco.com/en/US/docs/voice_ip_comm/cuma/7_0/english/install/guide/cuma_70_IAG_02_ASA.html


We were planning on positioning ASA behind a Juniper SSG20 firewall which has a static NAT configuration such as 81.8.x.y to 192.168.10.66 (which is ASA' s outside interface) ? Will this work as expected ?


Thanks in advance.


Dumlu

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
htluo Mon, 01/18/2010 - 10:42
User Badges:
  • Red, 2250 points or more

The main purpose of ASA is TLS proxy.  Technically speaking, you could put the ASA behind a NAT device as long as it can establish TLS connection with endpoints (cell phones).


The down side is: since this is not an "example" scenario, you'll have to fine tune the ASA config, which adds more complexity to troubleshooting.


Michael

http://htluo.blogspot.com

Actions

This Discussion

Related Content