Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

5510 with multiple Static IP ranges

We have a 5510 just put in with a public IP range of 209.x.x.x/29 and we are out of free IP addresses. Our ISP is unable to give us a larger range but has given us a seperate block of IP's 65.x.x.x/29. I am not sure how to program my 5510 to support the IP range. Do I need to give my outside int a secondary IP address? This new IP range will only be used for 1 to 1 nats. Do I need to create a static route or secondary default router, if so, how?

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Blue

Re: 5510 with multiple Static IP ranges

Jason

No you don't need a secondary address. As long as the ISP routes traffic for this new subnet to the outside interface of your ASA and they should be if they have allocated you that subnet then you can just use normal static statements + access-list entries to allow access to servers

eg.

static (dmz,outside) netmask 255.255.255.255

Jon

2 REPLIES
Hall of Fame Super Blue

Re: 5510 with multiple Static IP ranges

Jason

No you don't need a secondary address. As long as the ISP routes traffic for this new subnet to the outside interface of your ASA and they should be if they have allocated you that subnet then you can just use normal static statements + access-list entries to allow access to servers

eg.

static (dmz,outside) netmask 255.255.255.255

Jon

Community Member

Re: 5510 with multiple Static IP ranges

wow, that was fast. That makes sense, I'm going to confirm this with the ISP and run with it from there. Thank you for the quick response.

JB

260
Views
0
Helpful
2
Replies
CreatePlease to create content