[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 948
  • Last Modified:

ASA Multiple subnets

On a Cisco ASA if for example i have 10.1.1.1/24 configured on the outside interface and have 10.1.1.2 statically natted to a server on the DMZ, is it possible using static nat to also map a differnet subnet ip address to another server on the DMZ.
ie
Static (DMZ,outside) 10.1.1.2 172.16.0.1 netmask 255.255.255.255
Static (DMZ,outside) 10.2.2.2 172.16.0.2 netmask 255.255.255.255

would the ASA responed to ARP requestes for 10.2.2.2 and the 172.16.0.2 server be accessible from outside via that 10.2.2.2 address.

0
nappyshock
Asked:
nappyshock
  • 2
  • 2
1 Solution
 
JFrederick29Commented:
It won't respond to ARP requests since it is outside the subnet but it will properly NAT if you route the 10.2.2.x subnet to the outside of the ASA (10.1.1.1).
0
 
nappyshockAuthor Commented:
You mean from the upstream router
0
 
JFrederick29Commented:
Yes, correct.  The upstream router needs a route to 10.2.2.x via 10.1.1.1.
0
 
nappyshockAuthor Commented:
Thanks
0

Featured Post

A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now