Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Configuring aASA5505 for two separate networks using ASDM

Posted on 2015-02-10
2
261 Views
Last Modified: 2015-02-11
Hi I am a not very confident with Cisco ASA 5505 and have managed to get 4 sites connecting to our main site with site to site VPN’s
The network in the main site is on 192.168.0.1 the remote sites are 192.168.8.1, 192.168.6.1, 192.168.10.1 and 192.168.2.1 all works well without problem
We have 7 external addresses with our ISDN and are using two of them one for exchange and one for everything else.
A company is renting some office space from us and would like their own separate network of 192.168.12.1 internally and wants to use one of our spare external IP addresses.
My question is:
Is this possible on a ASA 5505 and would it configurable using the ASDM ?

Thank you in advance.
0
Comment
Question by:dances1960
2 Comments
 
LVL 6

Accepted Solution

by:
Daniel Sheppard earned 500 total points
ID: 40601288
The ASA 5505 cannot handle multiple routed networks.  You can create a DMZ, however that is not the best way to go about it if you can help it.

The DMZ isn't 100% bad, it will only mean that the two networks can't exchange traffic.  Not a big deal I suppose.

If you want to try using the ASA 5505 for this, you will need to:

- Configure a second interface with the other companies subnet (or a /30 and add a static route to their subnet through that /30)
- Set the security level
- Create a NAT policy for their systems
- Create a IP Access List to prevent traffic flowing between the two subnets (not strictly required however still recommended for portability)

So to answer, yes it is the possible.  Yes it is configurable through ASDM.
0
 

Author Closing Comment

by:dances1960
ID: 40602597
Wonderful, many thanks Daniel
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Public IP Address - Subnet 4 33
FreeRADIUS vs Windows NPS (server 2016) 2 117
nested esxi, NIC issues 1 30
Dlink-DIR 816 router 4 20
If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question