Cisco Support Community
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

5 IP address (external) how to route

We have an ASA5512 x series Version 3 that we need to setup for multiple incoming IP addresses. Not sure where to start with this. We do need some specific steps to take so please be specific.

For example we have 1 external Ip address (not our IP address) that we have routed to our email server. We have just registeed a sub domain and linked it to that we want to use as a VPN connection.  We have comcast business as our ISP so we do have 5 external IP address. We need to forward traffic from to an internal terminal server call in

I am unable to link GigabitEthernet 0/1 to because it is on the same subnet at

Any solutions come to mind for us? I have looked into setting up NAT pooling, but an unable to find the specific steps to accomplish that on an ASA 5512 X.

Please help.

Hall of Fame Super Silver

You are confusing routing and

You are confusing routing and NAT policies.

Your internal network 192.168.0.x connects to an inside ASA insterface in that same subnet.

Your external network 174.98.0.x connects to an outside ASA interface with a default route to your Comcast router's interface in that same subnet.

If you are allowing incoming VPN connections, they must terminate on the ASA's outside interface address.

If you want to allow incoming access to internal servers, each must have a static NAT or PAT entry mapping their internal address to one of the available external addresses. That may or may not be the interface address. You must also have a coresponding access list entry in and ACL that is applied to the outside interface to allow the traffic to enter from outside.

CreatePlease to create content