Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ASA 5505 & Multiple external IP

Hi,

I have a business Broadband, which has 5 IP addresses spread over 3 class C's supernetted for it to work each IP needs to be registered to a unique MAC address.
Is there any way I can get my ASA 5505 to have all 5 ip's on one interface, listening with 5 separate MAC's

EG:
Range 80.0.0.0 - 80.0.2.254 /22

IP1 80.0.0.212 MAC 0000:0000:00A0
IP2 80.0.0.240 MAC 0000:0000:00A1

IP3 80.0.1.35   MAC 0000:0000:00A2
IP4 80.0.1.118 MAC 0000:0000:00A3
IP5 80.0.2.228 MAC 0000:0000:00A4

All on eth0 set as the external interface.


Thanks in advance

Frank

6 REPLIES
Silver

Re: ASA 5505 & Multiple external IP

Hi Frank,

Unfortunately, this is not possible.  All IPs that are owned by the ASA will have the same MAC.  The only exception to this is for the standby IP in a failover set.

A follow-up question though.  Why does each IP need to be associated with:

  - a different MAC

  - a specific MAC

?

Sincerely,


David.

New Member

Re: ASA 5505 & Multiple external IP

The way that my broadband works is that I get 5 IP addresses that are assigned to the cable modem, and you have to have a different MAC for each one. It would be better if they gave you a range of IP's, but they say that can't be done. So my 5 IP's are dotted about 3 subnets. I have to have a router for each one, which is a pain.
(ISP is a UK Cable Company)

Cheers

Frank

Silver

Re: ASA 5505 & Multiple external IP

Hi Frank,

Unfortunately, in that case there isn't anything the ASA can do for you to help you utilize all 5 IPs.

Sincerely,

David.

Cisco Employee

Re: ASA 5505 & Multiple external IP

Hello,

If you really need to have 5 different MAC addresses, then you could

probably use a L3 switch module on a router (4 port or 9 port) and put each

port on a separate VLAN. That should allow you to register separate MAC for

each public IP and you will be able to use the firewall feature set on the

router.

http://www.cisco.com/en/US/prod/collateral/routers/ps5853/product_data_sheet

0900aecd8016bf0b_ps5855_Products_Data_Sheet.html

Hope this helps.

Regards,

NT

New Member

Re: ASA 5505 & Multiple external IP

The 5 Vlan method was the first I thought of, but wasn't sure about. I will give it a whirl and report back.

Thanks

Frank

New Member

Re: ASA 5505 & Multiple external IP

Update:

5 Ports in 5 Vlans doesn't work.

1st interface goes in OK, but once you get to the 2nd it fires an error pointing out that they are infact on the same subnet.

Back to Square One. But thanks for the help.

Frank

1115
Views
0
Helpful
6
Replies