Solved

Cisco ASA 5505 with DSL

Posted on 2011-02-14
3
2,063 Views
Last Modified: 2012-05-11
I have just had PPPoE DSL service installed at a remote office location. The DSL modem/router is a Motorola Netopia 3000. The DSL service has five static IP addresses: x.x.x.241-245, with .246 as the gateway, and 255.255.255.248 as the mask. The DSL service is working properly; when I connect the DSL modem to the LAN with its DHCP server enabled, it leases addresses to the clients, and they are able to browse the web, etc.

Now, I have a Cisco ASA 5505 that I would like to use for a VPN connection to the main office.

In the past, I have dealt with only T1 and Cable, not DSL. With Cable, I would simply assign one of my public IP addresses to the outside interface on the ASA, assign a LAN address (e.g. 192.168.1.1) to the inside interface, and configure a static route using the service's gateway address -- and voilà! I'm in business.

Note: In the above scenarios, I have typically used internal DHCP and DNS servers. In this case, I have no server on the LAN; I would like to use the 5505 as a DHCP server, and point my clients to the ISP DNS servers.

So, I configured the ASA as noted above, enabling the DHCP server to hand out my ISP's assigned DNS servers. When I installed the ASA between the Netopia and my LAN switch, the DHCP server on the 5505 properly assigned everything to the clients on the LAN, but I had no DNS resolution (DNS server not reachable via nslookup) -- no traffic outbound at all, even bypassing DNS.

I have heard that DSL doesn't get along very will with Cisco equipment "out of the box", but having never worked with the two in tandem before, I'm not sure where to begin troubleshooting.

NAT? Bridging?

Thanks.

Steve
0
Comment
Question by:sf09er
3 Comments
 
LVL 6

Accepted Solution

by:
kuoh earned 500 total points
ID: 34893868
Have you contacted the ISP?  Usually the DSL modem is configured to provide the PPPOE credentials, but operates in bridge mode.  Then you simply configure the outside IP & GW on the ASA as usual.  You will also need to find out the ISP's DNS server IPs and enter them in the ASA's DHCP server options.

KuoH
0
 
LVL 34

Expert Comment

by:Istvan Kalmar
ID: 34894135
Did you enabled importing dns?

dhcpd auto_config outside
0
 

Author Closing Comment

by:sf09er
ID: 34901928
I simply had to disable DHCP and enable bridging on the DSL router, then connect the ASA, connect to the DSL using PPPoE, and I'm in business. Thanks.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Is asymmetric routing of TCP conversations very common on the Internet? 5 26
Cisco 5508 controller parsing error 4 56
IPv6 NAT to IPv4 27 46
Choice of router 8 21
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now