Cisco WAN :: Assigning Public IP Address On ASA 5505
Jul 25, 2012
My company wants to create a VPN Tunnel to allow a remote office to connect to ours. I purchased 2 ASA 5505 and I was expecting to be able to set this up without any issues. Sadly, that is not the case.
What I'm having trouble with is configuring my Public IP Address to the device. I go through the setup wizard and enter the IP Address like normal, but I have no option to input my ISP's subnet, Gateway or DNS. Without those, I get no internet connection. I know there is a way to do this, but I'm stumped.
My Specs:
2 ASA 5505 series
ISP Modem (Which they control) - SMC SMCD3GN with DHCP disabled
View 1 Replies
ADVERTISEMENT
Feb 3, 2013
I have ASA 5505 with basic licence, v9.1, ASDM 7.1. I want to create the DMZ for a web server.
The interface 0 is for the outside network The interface 6 is for the DMZ All other interfaces are for the inside network
My ISP provided me with one public static IP address, one gateway address and a subnet mask 255.255.255.252
1/ I would like to ask which interface I should assign the public static IP address to. Should it be assigned to the outside interface 0, or should it be assigned to the DMZ interface 6, while outside interface would be configured to use DHCP?
I tried to assign the static IP address to the outside interface first, but then when I used ASDM the “Public Servers” feature to configure NAT, I get error message that the outside interface and the public address cannot have the same IP address.
2/ For the sake of peace of mind, I am thinking about using the second firewall, which would be used only for the inside network. Can I connect this second firewall to one of the inside interfaces of the 1st firewall,
View 4 Replies
View Related
May 26, 2012
We have 2 TS (Terminal Servers) and have configured the 1st RDP using my public address (say 8.8.8.8) on port 3389. it is working very well of course. However I need setup my 2nd TS but will use port 7777 on the same public address which is not working.I am using ASDM 6.3 and firmware 8.3.1.Is this a limitation for this IOS?
View 6 Replies
View Related
Sep 17, 2012
Is it possible to assign a L3 switch port with a public IP? How do you rallow data from the Internet to the above port, if possible?
View 5 Replies
View Related
Aug 24, 2011
we have cisco wlc 4404. and we want to access it thru internet.
i have attached the management interface screenshot.
View 6 Replies
View Related
Jun 29, 2011
Currently using WCCP with squid for content filtering. One of our sites we connect to needs to see the connection coming from our public IP address, not the proxy server IP. I've created a acl in squid for direct lookup, but the website gets angry with the X-Forwarder-Header squid attaches to each packet. Is there a way in a cisco ASA 5505 to bypass wccp for a specific public ip address or url?
View 4 Replies
View Related
Dec 19, 2011
I have an ASA 5505 configured with internal network, a DMZ, and a VPN on seperate subnets. The implicit rules allow my internal client computers to connect to the web servers on the DMZ IP, but I can not connect to the public NAT address from the internal network. I have a DNS server on my internal network and it does resolve to the public IP correctly. NAT seems to be working correctly because if I go outside the network and connect to the public IP or qualified name then I can get to everything correctly. I do not see any messages in the Cisco logs and the packet trace tool shows the route of http from an internal IP adddress to the external (NATed) address is allowed.
Specifically, I can go to http://192.168.1.121 from the internal (192.168.0/24) network, but I can not go to http://72.22.214.121 (the NAT address) from the internal network. If I am outside my cisco then I can go to http://72.22.214.121 easily. [code]
View 1 Replies
View Related
May 26, 2012
I am trying to give an static ip address to a time clock on my network and for some reason when I connect time clock to network it will always get an ip address from a different network. for example my computer IP address is 192.168.2.70 when connected to network, my default gateway is 192.168.2.1, the IP address that the time clock always gets is 192.168.1.120, there is no way to tell the time clock what IP address I wanted to be it has to get it from router (that is what the manufacturer told me), router (16portLiksys) does not have DHCP enabled the guy who set up network left it disabled, on his notes he says server (dell server T110) is acting as router is that true that a server can be acting as router?what do guys think is going on here?all the computers hooked up to network have static IP address.I also notice that when I connect a computer to router it will get an IP address from different network the same as time clock.I tried to reserve ip address on router by entering MAC address from time clock but it won't work. I am not very familiar with the server settings I have not try changing settings on server, I am not even sure the guy who set up network is right about using server as router.
View 1 Replies
View Related
Jan 7, 2013
HP wifi printers (I've had 2 over the last several years)eventually have a disconnect with my wifi router and was told (by an experienced IT guy from my last job) I should assign the printer a static address to eliminate the problem. How can I assign a static address to my printer. Here are the models Router: Belkin model F5D9231-4v1(01); Printer HP Officejet 6600. I know how to access the printer and manually enter an IP address and subnet and such, I just don't know which numbers to use where. I also know how to access my router, via typing in the IP address in Internet Explorer, but i'm unsure of which tab within the router's page (i.e. is it category wirelessunder MAC address control) or which numbers (IP address or MAC Address)and where should I get the correct numbers from (i.e. go run, cmd,IPconfig/all).
View 6 Replies
View Related
Jul 1, 2012
I am using Windows 2011 SBS and Windows 7 clients.My server has a DHCP range of 192.x.x.150 to 192.x.x.199 and all other I.P. addresses are static. On a workstation located at I.P. 192.x.x.13 I am seeing an address conflict.When I perform an "nbtstat -a 192.x.x.13" command from the server I am given the logical computer name of a staff members personal laptop.Investigation of the laptop reveals that it is set to DHCP, and clearly the address of 192.x.x.13 is outside of my servers DHCP scope, so this I.P.should never be assigned, let alone in duplicate.I Google this topic before posting, and it was suggested that IPv6 could be having an adverse affect. I determined this because I performed a ping on the laptop and only got a MAC address back rather than an I.P. address.However after unticking IPv6, and rebooting, the laptop is still causing havoc.I can set a static I.P. address on the laptop, however this is not ideal.
View 2 Replies
View Related
Oct 12, 2011
We once had a virtual server with two network adapters, one was internal and the other was external, and people could access it directly from the internet.
That server recently, died (someone put the .VHD file on a massive RAID 0 array, and that went boom), and I need to set it back up again. All the DNS entries appear to still be there, but how to assign the external IP to the network adapter. I tried Google, but my Google-fu must be weak today as I can't find anything useful.
It's a Server 2008 R2 machine running inside Hyper-V. Nothing's changed except for the new Windows install, it's running with the exact same VM settings, which I didn't touch except to add a new VHD.
View 5 Replies
View Related
Jan 22, 2012
I'm fairly new to Cisco configuration and I am looking at a problem for a client that involves the use of a Cisco 887 (wired only) as the main router/gateway. The problem I am investigating involves the allocatoni of DHCP addresses from the device to a product we have designed that connects to the router. I am attempting to set the 880 up on the bench with no ADSL connection and just use the DHCP feature of the box for the 4 switch ports on the back. I have tried all kinds of configurations from default. Whatever I do I can't get the router to assign an IP address to anything that is plugged in (Windows or Linux machines). What could I be doing wrong ? It can't be that difficult to get the system to just act as a DHCP server.
View 2 Replies
View Related
Jun 25, 2011
I just got a brand new laptop and I can't get it to connect to LAN.It's plugged in to the same hub as my main machine and I can't even access my router UI.It's not the cable because I tried plugging in my main machine's cable to the new laptop and the same thing happens.ipconfig reveals an Autoconfiguration IPv4 Address of: 169.254.197.187 But that number should say 192.168.1.1xx I've tried uninstalling and reinstalling the Ethernet driver as well.I've tried resetting the router and modem.I've tried resetting TCP/IP.
View 13 Replies
View Related
Mar 16, 2013
My wireless network consists mainly of approximately 1400 AP's 900 x 3602's, 500 x 3502's,The majority of these AP's especially the new ones have been manually optimised for channel and power settings. We paid an external surveyor to survey and optimise the AP's.
We have a few 5505 WLC's and the channel assignment method is set to "Freeze" ,My question is, if someone invokes a channel update on a WLC, will the WLC override the original manual channel setting if the WLC thinks it should be changed? And will the original setting be lost forever unless a restore is performed from the WLC Database?
View 5 Replies
View Related
Apr 9, 2012
Recently purchased 5 SGE2010P 48-port switches to replace older L2 switches. I have 4 switches in single stack and one as a standalone. Both the stack and standalone will connect to at least 1 Dell 2724 switch. Both the stack and the standalone Cisco are in Layer 3 mode.
I have created several VLans on the Cisco switches, and am trying to assign an IP address to the VLan, but cannot seem to figure out the web gui. Each time I try to use Systems > System Management > IP Addressing > IP Interface, then click Add, it simply changes the existing IP of the management interface. So, I'm not sure how to go about assigning an IP Address to an Vlan.
View 15 Replies
View Related
Oct 25, 2012
hrome threw me a DNS lookup failed. I go into my network settings and I noticed that I had limited connectivity. It would switch between no network access and no internet access every few seconds. After a bit of fiddling around, I got it to connect through assigning myself a static IP. This isn't exactly convenient because I use this computer on multiple networks. When I try to have it on automatic IP, I get no IP address or default gateway when I do an ipconfig /all. It would appear that my router quit assigning my laptop an IP for no reason whatsoever. DHCP is enabled on the router, and all other devices work fine. What could possibly be the problem here? I'm 99% sure it's not an IP conflict either. It's not being MAC filtered because I'm on the thing right now posting this through a static IP. It's not my A/V because it's worked great in the past. Perhaps I should also mention it occasionally says "unidentified network" instead of the SSID
View 8 Replies
View Related
Nov 20, 2011
The DHCP/DNS server is on ip address 10.1.100.103 with an alt on .102 I'm attempting to integrate a 4510R+E into an existing network and use existing DHCP/DNS windows 2008 server to push out IP addresses to connected computers.
I want to assign a VLAN to every port for management purposes and then I put an IP helper address on every VLAN.
I've attached a the 4500E partial config. I'm attempting to get Gi1/44 to a state where I can plug a computer into it an resolve an ip address and gain internet access like all the devices on the existing network can do.
I've created a new scope in DHCP with the ip subnet of 10.60.211.0 255.255.255.0 It leases addresses from .1 to .253
The computer will not resolve ip addresses with this config.
View 5 Replies
View Related
May 20, 2012
The problem is WAP 610n not assigning IP address through DHCP; i have to add IP address mannualy.
just go through the details below:
In my network environment we are using :
CISCO Router 800 series; IP: 192.168.1.1
Domain server with DHCP server : 192.168.1.2
DHCP pool: 192.168.1.234 - 192.168.1.250
WAP IP : 192.168.1.236
WAP configuration :
configuration view : mannual
Wireless band : 2.4 Ghz
Network mode : mixed
channel width: 20 Mhz only
standard channel : auto
SSID broadcast : Disabled [ for security reason]
Security mode : WPA2 Personal
Encryption : TKIP/AES
Firmware : 1.0.01 build 94, Oct 26, 2009
Note: In status menu it is not showing any default gateway.
Encapsulation method in CISCO router : PPPoA [ as instructed by ISP]
View 5 Replies
View Related
Feb 16, 2013
some problems when I was trying to install my X3000 as a DSL modem and router.I had to assign a designated IP address but I have dynamic IP from my internet supplier. I can't get pass the stepp of assigning IP address.
View 4 Replies
View Related
Apr 3, 2011
Is there anyway you can assign a static IP address within WAG160Nv2 to peripherals such as an XBOX?
The knowledge base only seems to show how to assign an IP address in the XBOX but when I have to reboot the router, I've noticed the XBOX is assigned a new IP address when viewed in the router pages.
If I set a permanent IP address in the XBOX, this will no longer match what is in the router.
View 1 Replies
View Related
Feb 28, 2011
Is it possible to assign public IP address as Router's local IP address (RVL200, RVS4000)?
View 1 Replies
View Related
May 13, 2011
1. how do I nat a public address to a dmz address.
2. how do I open port 80/443 in the public to this address?
View 1 Replies
View Related
Sep 7, 2011
I have a ASA5505 that I need to allow IPSEC and SSL VPNs through. The ASA is connecting to a BT Business ADSL router, what address should I be using on the ASA outside interface that will allow the ASA to be reachable from the Internet?
View 1 Replies
View Related
Jan 16, 2013
We have 2 IP blocks from my ISP. We have been using just one a /30 block with one IP address used on the outside interface of the device. The new block is a /29 range and I would need to use just two of those IP addresses. Here is the situation I am facing.A company we partnered with wants to set up a VPN, they will send us 2 Cisco 861s to put behind our ASA. Is it possible to assign these 861's with public IPs from the block that we are not currently using? (the /29 range)? I know that it might require an upgrade to the Security Plus.
View 7 Replies
View Related
Jul 19, 2012
We have ciso asa 5505 and we are using one public ip of 155.155.155.9 , so i wanna disable to ping from outside this ip , but not effect our site to site and remote vpn connections ,the only thing i need is to disable the public ip to ping from outside.
View 7 Replies
View Related
May 2, 2013
The client I am doing work for as ASA 5505 at a remote location that is using Cox Communications for the ISP. The ISP assigned 5 static IP addresses, but we only need 1 for this location. However, that is the minimum you get no matter what. The issue is that the subnet mask is a /25 and what they are telling me is that the ASA is grabbing all the IP addresses in that range. They asked if there is anyway to keep the ASA from grabbing those IP addresses. Now, I have never run into this issue before with a provider. The gateway is in the /25 subnet, so going to a /30 isn't an option.
View 5 Replies
View Related
Sep 10, 2011
Attached is my updated ASA 5505 (8.4[2]) config. With this config, basically the "laptop" group works fine, but the leo and orion groups don't ever receive packets inbound. No DNS, nothing.
The laptop is windows, the other two are servers with two NICs. The interface cards are Intel Pro/1000s. I've been through everything including Vlan protocol conflicts and actually enabled the servers for 802.1(Q).
View 19 Replies
View Related
Mar 8, 2012
I'm really bad on networking so I have a question about NAT. I got two public IP addresses from my ISP: 92.x.x.252 - 92.x.x.254. 92.x.x.254 is configured as secondary on external interface and clients will use it two connect (vpn) it from outside through cisco 1841 to zywall p1 with wan ip address 92.x.x.253. Is this configuration (look at picture) allowed? How can I route traffic from 92.x.x.254 to zywall p1, if posible?
View 10 Replies
View Related
Jul 8, 2012
I have an old ASA 5505, and I'm having some trouble with Nat Hairpinning. I've done this with other firewalls before and I am having no luck now. I have an internal address that I wish to forward from an external address- so if someone goes to 123.456.789.012:3456 then it will forward to 192.168.1.244:92 (All numbers are arbitrary here- only for illustration). I have and Access Rule and NAT and PAT set up so that I can get in if I originate from outside the LAN. What I am trying to do is to have this work from inside the LAN as well- so that if I am at my desk, and I connect a device and type in 123.456.789.012:3456, it will deliver the content at 192.168.1.244:92. The problem I am having is that it just isn't working, and I cannot figure out why- When I started here, there was an address configured to work this way, and it still works- I just cannot find what is different between what I am doing and what the person who configured it did.
View 7 Replies
View Related
Feb 18, 2013
How to get DynDNS or some other public dynamic DNS services on the Internet working on ASA 5505?
View 2 Replies
View Related
Sep 25, 2011
I have a customer thats got a Linksys router now, that has a DMZ port.The DMZ port is configurede to it routes the extra public ip-adress to the DMZ port it has.At the DMZ port they have another router connected, where they routes the public ip-adresses på some other devices.How can i make this setup on a Cisco ASA 5505 (With the Security Plus licens)What i have to do is to replace the Linksys router, and make it so, so it works like it was before with the Linksys.
View 5 Replies
View Related
Sep 8, 2011
Is it possible to two or more public IP Addresses bound to a Cisco ASA 5505 running 8.4(2).
View 9 Replies
View Related
Jun 23, 2011
We will acquire a DSL connection with 5 static public address. How can I use the 5 static public address using a linksys router. Is it depends with linksys router model?
View 2 Replies
View Related
