Solved

Gateway of Last resort

Posted on 2007-11-23
11
2,479 Views
Last Modified: 2012-08-14
I am trying a basic set-up that I want to look like this:

Internet
 |
ISP router (cisco 870)
 |
ASA 5510
 |
LAN

My ISP has given me a /29 network of public IP addresses, the first address is assigned to the ISP's router. I have assigned the second in the range to the Outside interface of my ASA. I am planning to use the rest of the IPs in a DMZ and for some NATting. The problem is that when I try to specify the default route to be the IP of the ISP's router, I get warned that the route is directly connected, which it is.
But how do I specify my gateway of last resort to use the ISP router?
0
Comment
Question by:Curlysafrican
  • 5
  • 3
  • 2
11 Comments
 
LVL 3

Expert Comment

by:mediaonegraphics
ID: 20338228
Question. Why dont you have the ISP's router setup as a bridge and your ASA as the 1st public?
0
 

Author Comment

by:Curlysafrican
ID: 20338280
My ISP doesn't do bridging on the routers. Part of their policy/strategy.
0
 
LVL 3

Expert Comment

by:mediaonegraphics
ID: 20338307
The ISP's router should be configured as your default gateway:
http://www.cisco.com/warp/public/105/default.html
0
Don't miss ATEN at NAB Show April 24-27!

Visit ATEN at NAB Show to learn how our "Seamlessly Entertaining" solutions deliver fast, precise video streaming without delays for the broadcasting and media environment. ATEN will showcase its 16x16 Modular Matrix Switch (VM1600) and KVM Over IP Solution (KE6900 series).

 

Author Comment

by:Curlysafrican
ID: 20338361
I have tried to specify the ISP's router as my default gateway with no joy. Thanks for the link, but the ASA's CLI works a little different to that of the routers mentioned.

I entered the following:
ASA(config)# route Outside 0.0.0.0 0.0.0.0 <IP address of router> 1

Then I get the following output:
ERROR: Cannot add route, connected route exists.

Even when I try to add the router's external IP, I get this message.
0
 
LVL 3

Expert Comment

by:mediaonegraphics
ID: 20338376
Try using the gateway IP as used in the ISP's router.
0
 

Author Comment

by:Curlysafrican
ID: 20338438
I get the same result.
ERROR: Cannot add route, connected route exists.
0
 
LVL 28

Expert Comment

by:batry_boy
ID: 20338697
Post the current ASA configuration...is it using DHCP for Ethernet0 with the "setroute" option at the end?  If so, the ASA is picking up the default route from the ISP's router.
0
 

Accepted Solution

by:
Curlysafrican earned 0 total points
ID: 20367232
Restarting the device allowed the next hop to be entered.
I noticed a default route "speciified" on the management interface when issuing a show route.
After the restart I was able to apply the conifg:

ASA(config)# route Outside 0.0.0.0 0.0.0.0 <IP address of router> 1
0
 
LVL 28

Expert Comment

by:batry_boy
ID: 20367386
Cool...did that fix your issue?
0
 

Author Comment

by:Curlysafrican
ID: 20367494
It did resolve the issue that I had and now I can talk out without problem. Thanks for all your input.

0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Draytek (Site to Site VPN using IPSec) 6 61
Deny permission ACL 16 43
VLAN Configuration on Cisco Switch 8 35
Cisco tacacs question 6 28
In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question