ASA 5510 Assigning multiple IP's on outside interface for VPN

Is it possible to assign a second ip address to the outside interface of an ASA 5510 to use as a VPN endpoint?  I have one P2P VPN that we need to assign another public ip address for.  This is because of a routing issue we have with the same companies web server that we access through our primary ip address.  They cannot route their web traffic and VPN traffic to the same public ip address on our side.

I had thought about some type of VLAN on the outside interface, but I have not been able to find anyone else doing this.  I didn't know if there would be security concerns or if it is even a viable option.  I know I can NAT multiple public ip's to internal hosts, but I have not been able to find anything on assigning multiple ip addresses for the ASA to use on one interface.
celloneAsked:
Who is Participating?
 
3nerdsConnect With a Mentor Commented:
The simple answer is you can not do it.

BUT

You could  attempt to vlan the interface and trunk it to a switch.

I can give you snip it of config for that type of setup but I don't have the switch side of things as that is not my area of expertise.

interface Ethernet0/2.997
 description Test Backup Internet Interface
 vlan 997
 nameif outside_backup
 security-level 0
 ip address x.x.x.x 255.255.255.x
!
interface Ethernet0/2.998
 description Test Visitor Interface
 vlan 998
 nameif visitor2
 security-level 2
 ip address x.x.x.x 255.255.255.0
!
interface Ethernet0/2.999
 vlan 999
 nameif DMZ
 security-level 10
 ip address x.x.x.x 255.255.255.0

Regards,

3nerds
0
 
celloneAuthor Commented:
I had thought about trying a VLAN but didn't know if there would be any security concerns with it.  I have never read of it being done on a outside interface of an ASA or a switch with a public ip.  

I will try this tomorrow and will post back my results.
0
 
3nerdsCommented:
Let me know

3nerds
0
 
celloneAuthor Commented:
That worked, thanks for your help.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.