Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 681
  • Last Modified:

What command do I use to assign static IP to ASA interface

My ASA outside interface is getting an address from the DHCP in a TELMEX DSL router.  I need to turn DHCP off.  How do I assign a static IP?  I need to know the commands.  Here is the interface config now with an address from DHCP.

Interface Vlan2 "outside", is up, line protocol is up
  Hardware is EtherSVI
      MAC address 0007.0e46.ad0d, MTU 1500
      IP address 192.168.1.101, subnet mask 255.255.255.0
  Traffic Statistics for "outside":
      16548 packets input, 23143012 bytes
      11208 packets output, 505824 bytes
      38 packets dropped
      1 minute input rate 208 pkts/sec,  293293 bytes/sec
      1 minute output rate 140 pkts/sec,  6077 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 0 pkts/sec,  0 bytes/sec
      5 minute output rate 0 pkts/sec,  0 bytes/sec
      5 minute drop rate, 0 pkts/sec
0
jtennyson
Asked:
jtennyson
  • 8
  • 8
1 Solution
 
Ernie BeekCommented:
Int vlan2
IP address x.x.x.x 255.255.255.x
0
 
Ernie BeekCommented:
Don't forget you'll need a default route as well then.

Route outside 0.0.0.0 0.0.0.0 x.x.x.y
The x.x.x.y should be the IP of internet router/modem.
0
 
Randy DownsOWNERCommented:
http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/gl.html

 To reset the interface and delete the DHCP lease from PIX Firewall, configure a static IP address with the ip address if_name ip_address [netmask] or ip address if_name pppoe | dhcp [setroute] command, or use the clear ip command.

The ip address dhcp and pppoe command options are mutually exclusive.

0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 
jtennysonAuthor Commented:
The LAN address correct?
0
 
jtennysonAuthor Commented:
Erniebeek - I need to route to the routers inside LAN address correct.  192,168.1.254?
0
 
Ernie BeekCommented:
No, the pix needs a default gateway. If your provider gave you a static IP, he should have also have given you a gateway address. Did he?
0
 
jtennysonAuthor Commented:
The router does not have a static IP on the outside.  The gateway wouldn't be the static IP on the inside of the router?
0
 
Ernie BeekCommented:
Ehr, but the question was: 'how do I assign a static ip on the outside' was it?

So what we are discussing here is what to do when you are going to assign a static ip on the outside.

When using DHCP (as you are now), a default gateway will be assigned automatically.
0
 
jtennysonAuthor Commented:
No.  I want to assign a static IP on the  ASA wich connects to the DSL router.  It is on the inside.  connecting to 192.168.1.254.  I don't want to use DHCP on the router.
0
 
Ernie BeekCommented:
Ok, getting confused here.

Could you try to describe this a bit more elaborate?
0
 
jtennysonAuthor Commented:
I am going to create a (very crude) diagram and upload it.
0
 
Ernie BeekCommented:
Please do :)
0
 
jtennysonAuthor Commented:
Maybe this helps.
Juarez-diagram.pdf
0
 
Ernie BeekCommented:
Ah, I think I'm getting it :)

The ASA is on the inside of the router getting a DHCP addres on it's outside interface (from the router.

So you'll need:

Interface vlan2
IP address 192.168.1.x 255.255.255.0

For the x fill in the number you would like it to have.
And:
route outside 0.0.0.0 0.0.0.0 192.168.1.254

That should do the trick.
0
 
jtennysonAuthor Commented:
Thanks so much
0
 
jtennysonAuthor Commented:
Thanks for the help.  I know I wasn't all that clear at the beginning
0
 
Ernie BeekCommented:
:)
Well, eventually we got there, didn't we ;)

Thanks for the points.
0

Featured Post

Ask an Anonymous Question!

Don't feel intimidated by what you don't know. Ask your question anonymously. It's easy! Learn more and upgrade.

  • 8
  • 8
Tackle projects and never again get stuck behind a technical roadblock.
Join Now