Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

Question about configuring a ASA 5510

I am in the process of setting up our 5510 to replace our current SonicWall at my place of work.  When looking at our SonicWall config I noticed that the IP addresses we have setup for our phone vendor to access the PBX systems at our various sites are set up with a begining IP range and end range which are static.  These addresses go any where from 2 to 5 addresses and when you configure them through the SonicWall it lets you set a begining range and ending range.  Looking through the ASDM console I dont see away to define a range of static addresses for servers.  Do I need to enter in every PBX seperatly or is there a way to define a range like 192.xxx.xxx.200 through 192.xxx.xxx.205.

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Blue

Re: Question about configuring a ASA 5510

southpaw34 wrote:

I am in the process of setting up our 5510 to replace our current SonicWall at my place of work.  When looking at our SonicWall config I noticed that the IP addresses we have setup for our phone vendor to access the PBX systems at our various sites are set up with a begining IP range and end range which are static.  These addresses go any where from 2 to 5 addresses and when you configure them through the SonicWall it lets you set a begining range and ending range.  Looking through the ASDM console I dont see away to define a range of static addresses for servers.  Do I need to enter in every PBX seperatly or is there a way to define a range like 192.xxx.xxx.200 through 192.xxx.xxx.205.

You can use object-groups but it does depends on whether you can summarise the range eg.

object-group network PBX

network-object 192.xx.xx.200 255.255.255.252

network-object host 192.xx.xx.205

would cover 192.xx.xx.200 -> 205

then in an acl you would refer to it as -

access-list outside_in permit tcp object-group PBX eq

Jon

3 REPLIES
Hall of Fame Super Blue

Re: Question about configuring a ASA 5510

southpaw34 wrote:

I am in the process of setting up our 5510 to replace our current SonicWall at my place of work.  When looking at our SonicWall config I noticed that the IP addresses we have setup for our phone vendor to access the PBX systems at our various sites are set up with a begining IP range and end range which are static.  These addresses go any where from 2 to 5 addresses and when you configure them through the SonicWall it lets you set a begining range and ending range.  Looking through the ASDM console I dont see away to define a range of static addresses for servers.  Do I need to enter in every PBX seperatly or is there a way to define a range like 192.xxx.xxx.200 through 192.xxx.xxx.205.

You can use object-groups but it does depends on whether you can summarise the range eg.

object-group network PBX

network-object 192.xx.xx.200 255.255.255.252

network-object host 192.xx.xx.205

would cover 192.xx.xx.200 -> 205

then in an acl you would refer to it as -

access-list outside_in permit tcp object-group PBX eq

Jon

New Member

Re: Question about configuring a ASA 5510

Thanks Jon, I was actually just looking into that and thought that was the way it sh

ould be done.

New Member

Re: Question about configuring a ASA 5510

So if I had multiple PBX's I would create object groups then

161
Views
0
Helpful
3
Replies
CreatePlease to create content