?
Solved

Cisco 1841 PPPoA config with ASA 5505

Posted on 2009-02-18
2
Medium Priority
?
2,160 Views
Last Modified: 2012-05-06
Hi all,

At my branch office I currently have a Cisco 1841 with ADSL WIC authenticating PPPoA with the ISP, this router also contains ACL's and a point-to-point VPN tunnel to my main office.  We have been issued only one static IP address from the ISP which is assigned to the dialer interface on the 1841.

I am wanting to install a ASA 5505 in the branch office to give me greater firewall function and manage the VPN, but as the ASA 5505 only supports PPPoE and not PPPoA i was wondering if i can just use the 1841 to authenticate the PPPoA and then pass traffic thru to the ASA??   - if so would the VPN tunnel have to terminate on the 1841 still or could i assign the static IP address to the outside interface of the ASA?  My ISP will not give me a second IP.

Any advice would be appreciated.

Thanks.

0
Comment
Question by:turner20
2 Comments
 
LVL 5

Accepted Solution

by:
rexxus earned 375 total points
ID: 23677057
Yes you can put the ASA behind the router and leave the public IP address on the routers external interface and terminate the VPN's on the ASA.

A good option would be to have some basic filtering on the router such as denying RFC1918 addresses (10.x.x.x, 172.16.x.x etc) then have more granular rules on the ASA

If you're NAT'ing on the router you'll need to configure VPN pass through so that VPN traffic is not NAT'd and sent straight to the ASA.


See the following link for config options

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094ecd.shtml
0
 

Author Closing Comment

by:turner20
ID: 31548581
Thanks for the quick reply!
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

569 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question