• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 310
  • Last Modified:

Cisco ASA5505 Reconfiguration

I have a Cisco ASA5505 Firewall that I need to reconfigure.  I will be changing from DSL to Cable and will be receiving new incoming IP addresses.  I need to be able to keep our network running during the change.  I have an FTP sight that is plugged into one of the ports as well.  I am very unfamiliar with the device but I am able to get into the GUI to change any setting but do not know how.  Can someone offer any advice on what needs to be changed, how to change it or where I can look to change it?

Thank you in advance for your Expert help!
0
lordzack
Asked:
lordzack
  • 5
  • 3
1 Solution
 
Istvan KalmarCommented:
Hi,

only that you need to set up Outside address to DHCP,... Please provide us the sanitazed config, and we put the commands that you need...
0
 
sysreq2000Commented:
In ASDM click on the configuration button at the top, then in the left pane under Device Setup click on Interfaces. You will see your list of interfaces in the right pane. Double click Outside and you will see the options to enter a static IP or select Use DHCP radio button.

For your FTP server, do you mean you have a server that people connect to? If so you don't need to do anything on the ISA, you will just have to let your users know your new IP, or update your DNS with your new IP.
0
 
sysreq2000Commented:
Sorry not ISA, ASA  8-)
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
lordzackAuthor Commented:
Can you explain what you mean by sanitized config? Also, I've received several IP addresses from our new provider-

Network Address - XX.XX.XXX.128
Default Gateway (Router) - XX.XX.XXX.129
Available Addresses - XX.XX.XXX.130-134
Network Mask - XXX.XXX.XXX.248
Primary DNS Server: XX.XX.X.60
Secondary DNS Server: XX.XX.X.61

Will I be plugging any or all of these numbers into the firewall?
0
 
lordzackAuthor Commented:
Currently the "Outside" interface is "Use PPPoE" with PPP Authentication (PAP).  With the Information that I've received from Time Warner I should use "Use Static IP" ?
0
 
sysreq2000Commented:
Yes you have been given a block of IP's. You will need to decide which IP to use for the firewall. Do you know why you have a block of IP's, are they being used elsewhere?

You will need the IP address, the DNS addresses, the Default gateway and the subnet mask for the firewall. All that info is there you just have to decide which IP to use, probably the .130 would make sense.
0
 
lordzackAuthor Commented:
The extra IP's are for our use as we see fit.  So you are saying I should use one of the block IP's and not either the Network Address or Default Gateway?
0
 
sysreq2000Commented:
Yes. The network address merely defines your block, it's not a usable address. You will need to enter whichever block IP you choose as the IP address. Most commonly people use the lowest usable address in the block, so x.x.x.30 but it's up to you which one to use.

Then enter the default gateway under the "Routing" section, in Static Routes. Enter it as:

Interface: Outside
IP Address: 0.0.0.0
Netmask: 0.0.0.0
Gateway IP: x.x.x.129
0
 
sysreq2000Commented:
Also if you're using the ASA as a DHCP server for your users, you will need to update the DNS entries. You will find that in the Device Management section, under DHCP, then DHCP Server. Change the DNS entries for the Inside Interface.

If you're not using the ASA as your DHCP then you will need to update the entries on your DHCP server, or on your clients machines if they are static.

0

Featured Post

NEW Veeam Backup for Microsoft Office 365 1.5

With Office 365, it’s your data and your responsibility to protect it. NEW Veeam Backup for Microsoft Office 365 eliminates the risk of losing access to your Office 365 data.

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now