Skip to main content

ASA 5505 & 5 Public IPs possible?

More
16 years 2 months ago #27458 by DiamondSea
Hey guys,

we have 5 static public IPs from ISP (BT UK). IIRC there are 8 addresses altogether including router IP + starting and ending.

We also have Cisco ASA 5505 and would like to know if we can use it or have to go with BT 2Wire router?

In fact we only need to PAT 2 servers so only 2 addresses will be used. If it is possible with ASA 5505 can someone pls share code or point to some guidance on the 'net?

Many thanks!

Al aka Diamond Sea
More
16 years 2 months ago #27460 by Patiot
Yes sure you can have 5 public ip`s . You can use all the 5 of them in the asa that you have . It depends on your requirements how it should be configured .

As your question was very generic I will recommend you to visit cisco.com .

Link : cisco.com/en/US/products/ps6120/prod_con...n_examples_list.html

Please let me know if you have any other questions .

Thanks
Patiot
More
16 years 2 months ago #27484 by DiamondSea
Patiot, thank you for the reply.

I had a quick look through the articles in the link you provided, but nothing seemed obvious so far. I will spend more time later today browsing through them but all I want to do is have two mail servers on the inside network with IMAP access. I currently have one mail server with single public IP assigned to ASA. Since BT sells these in packs of 5 with 3 additional IPs, I got confused. Can anyone share the config for such setup?

Many thanks
More
16 years 1 month ago #27487 by Patiot
Ok , I will demonstrate with an imaginary scenario here :

--- ASA -- Two internal email servers

1. Say you want to give these servers imap access .
2. Let us assume that the internal ip`s of the servers are 192.168.1.10 and 192.168.1.11 and the outside public ip`s are x.x.x.x
and y.y.y.y respectively .

Here is what you need : to redirect traffic on tcp imap port on address x.x.x.x and y.y.y.y to your internal mail servers :

static (inside,outside) tcp x.x.x.x 143 192.168.1.10 143 netmask 255.255.255.255

static (inside,outside) tcp y.y.y.y 143 192.168.1.11 143 netmask 255.255.255.255

access-list outside_acl permit tcp any host x.x.x.x eq 143

access-list outside_acl permit tcp any host y.y.y.y eq 143

Thank You
Patiot
Time to create page: 0.126 seconds