Federico Coto F... Sun, 03/14/2010 - 09:47


You need to provide connectivity between two branches via the ASA?

This can be done with VPN tunnels (Site-to-Site IPsec)

What exactly do you need so we can help you out?


NadastraIThelpdesk Sun, 03/14/2010 - 21:13


I need to connect two broardbrand internet connection for two seperate devision using ASA firewall 4 ethernet ports. Is there a way to do that?

Federico Coto F... Sun, 03/14/2010 - 21:20


Each port on the 5510 can have a different IP (belong to a separate subnet).

You can use two Internet ports (just make sure you have the appropiate routing setup to route traffic via each of the Internet ports).

Then you can use the rest of the ports to connect to the inside or DMZ networks.


Leo Laohoo Sun, 03/14/2010 - 21:33

Isn't the ASA limited to one inside interface and one outside interface?

Federico Coto F... Sun, 03/14/2010 - 21:39

The only ASA limited to one inside and one outside interface is the 5505 (without the security plus license).

If you have an ASA 5510, you can have up to 5 interfaces (one inside, one outside and three DMZs for instance).

If you have the security plus license, you can upgrade 2 of those FastEthernet ports into Gig ports.

You can check the license that you have with a ''sh ver''

Anyways, if it's an ASA 5510, you have up to 5 interfaces (because the management port can be used as a regular interface as well).


NadastraIThelpdesk Mon, 03/15/2010 - 01:18


Thnaks Federico. Can I use pppoe connection without using static IP for wan interfaces for this.



This Discussion

Related Content