Subnet question

[thomas.green]

We currently have a block of addresses that use a 28 mask and will be changed to a larger block of addresses contiguous with our existing block of addresses. The mask will change to a slash mask of 27. Since we are keeping the original public address in the existing range for the ASA will we have to make any additional changes to our ASA appliance?

[Jon Marshall]

Thomas

If you are using the public IP addresses you already have for static translations eg

static (inside,outside) 193.10.1.1 192.168.5.1 netmask 255.255.255.255

then no you don't need to change this.

If one of the public addresses is assigned to your outside interface then yes you would need to update the subnet mask.

Also i'm assuming that if you are increasing from a /28 to a /27 then your ISP wull route the /27 to your ASA instead of the old /28.

Jon

[m_zabetian]

NO just make sure your out side interface IP address change to /27 and default route change to your new default gateway if it is not point to interface