Learn how to a build a cloud-first strategyRegister Now


Assigning two seperate ip ranges to an ASA firewall

Posted on 2012-09-10
Medium Priority
Last Modified: 2014-02-02
Hey all,

We have hit a potential issue - we're running out of IP Addresses in the externally assigned range. We've spoken to Time Warner Cable who provide us with our Ethernet connection and they've said they can assign us an additional range, but it will not be sequential from the current range.

All fine with that, we don't really care - we just need more IP's.

How can i do this or Can this be done on a ASA 5520 version 8.3.(1)
Question by:cmitch2000
LVL 17

Accepted Solution

max_the_king earned 1500 total points
ID: 38385932
I've been through this before, no problem.
When your ISP assign new public IP addresses to you, it lets your data line (router) to route any packet to the added subnet: this means that your ASA will reach that (and can as well assign static NATs to its machines) new subnet through its default route.
You can treat the new IPs as regular public IPs.

hope this helps

Expert Comment

ID: 39827902
You need to make sure your ISP is routing the new  block  of public IPs to the IP address  assigned to the outside interface of your ASA firewall. Once that is done then you can use the new block issued and NAT just as your do with your original block.

Featured Post

Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as high-speed processing of the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question