Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Secondary IP Addresses on ASA

Hi All,

How can we add secondary IP Addresses to interfaces in ASA? What is the need for secondary addresses on an interface?

Thanks

1 REPLY
Hall of Fame Super Blue

Re: Secondary IP Addresses on ASA

sidcracker wrote:

Hi All,

How can we add secondary IP Addresses to interfaces in ASA? What is the need for secondary addresses on an interface?

Thanks

You can't but then you don't really need to eg.

you have an outside interface with a public IP address. You now need some more public IPs and your ISP gives you a new /29 block of public IPs. Because they have been assigned to you the ISP will route those addresses to your ASA ie. the existing outside interface.

So to use them you do not need to physically address any other interface, you just use NAT statements eg you have al web server 192.16.5.10 that you want to present to the Internet with one of the new public IPs

static (dmz,outside) 195.17.17.10 192.168.5.10 netmask 255.255.255.255

then just add an ace in your outside acl

access-list outside_access_in permit tcp any host 195.17.17.10 192.168.5.10 eq www

Jon

2057
Views
0
Helpful
1
Replies
CreatePlease to create content