Cisco Unified Mobility Advantage / Cisco ASA Deployment Question

dumlutimuralp · ‎01-18-2010

Hi all,

I was wondering, whether if we have to configure ASA' s outside interface with a real IP address according to the configuration guide below ?

http://www.cisco.com/en/US/docs/voice_ip_comm/cuma/7_0/english/install/guide/cuma_70_IAG_02_ASA.html

We were planning on positioning ASA behind a Juniper SSG20 firewall which has a static NAT configuration such as 81.8.x.y to 192.168.10.66 (which is ASA' s outside interface) ? Will this work as expected ?

Thanks in advance.

Dumlu

htluo · ‎01-18-2010

The main purpose of ASA is TLS proxy. Technically speaking, you could put the ASA behind a NAT device as long as it can establish TLS connection with endpoints (cell phones).

The down side is: since this is not an "example" scenario, you'll have to fine tune the ASA config, which adds more complexity to troubleshooting.

Michael

http://htluo.blogspot.com