Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Configuring aASA5505 for two separate networks using ASDM

Posted on 2015-02-10
2
Medium Priority
?
278 Views
Last Modified: 2015-02-11
Hi I am a not very confident with Cisco ASA 5505 and have managed to get 4 sites connecting to our main site with site to site VPN’s
The network in the main site is on 192.168.0.1 the remote sites are 192.168.8.1, 192.168.6.1, 192.168.10.1 and 192.168.2.1 all works well without problem
We have 7 external addresses with our ISDN and are using two of them one for exchange and one for everything else.
A company is renting some office space from us and would like their own separate network of 192.168.12.1 internally and wants to use one of our spare external IP addresses.
My question is:
Is this possible on a ASA 5505 and would it configurable using the ASDM ?

Thank you in advance.
0
Comment
Question by:dances1960
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 7

Accepted Solution

by:
Daniel Sheppard earned 2000 total points
ID: 40601288
The ASA 5505 cannot handle multiple routed networks.  You can create a DMZ, however that is not the best way to go about it if you can help it.

The DMZ isn't 100% bad, it will only mean that the two networks can't exchange traffic.  Not a big deal I suppose.

If you want to try using the ASA 5505 for this, you will need to:

- Configure a second interface with the other companies subnet (or a /30 and add a static route to their subnet through that /30)
- Set the security level
- Create a NAT policy for their systems
- Create a IP Access List to prevent traffic flowing between the two subnets (not strictly required however still recommended for portability)

So to answer, yes it is the possible.  Yes it is configurable through ASDM.
0
 

Author Closing Comment

by:dances1960
ID: 40602597
Wonderful, many thanks Daniel
0

Featured Post

Looking for the Wi-Fi vendor that's right for you?

We know how difficult it can be to evaluate Wi-Fi vendors, so we created this helpful Wi-Fi Buyer's Guide to help you find the Wi-Fi vendor that's right for your business! Download the guide and get started on our checklist today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Originally, this post was published on Monitis Blog, you can check it here . It goes without saying that technology has transformed society and the very nature of how we live, work, and communicate in ways that would’ve been incomprehensible 5 ye…
This month, Experts Exchange’s free Course of the Month is focused on CompTIA IT Fundamentals.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Suggested Courses

704 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question