Additional IP address on an ASA 5510, best practices?
Posted on 2014-03-25
At the moment I have a bog standard setup:
1) An inside port connected to the inside network
2) An outside port with a single static IP
3) NAT to allow my inside users to browse the internet
The outside IP is acquired via PPPoE to an ISP provided DSL router.
Now we have decided to run a web server, and we'd like to use a different IP. I've phoned the ISP, and they have provided a number of IPs, in the same range. The other IPs I'm told need to be statically set.
I'm confused about how to set up this new IP. It seems I can't just add a subinterface IP to the already existing connection (the subnet overlaps). What I'm left with is that I can add a subinterface with its own VLAN, but no IP. Where can I proceed from here?
I was also thinking I could use the new IPs in a NAT pool, allowing me to separate the traffic in a different way. But it's not clear how to do this.