When I check my WIFI router I do not see on the WAN interface. Comcast is assigning the dynamic IP Address. The modem will dynamically assign that IP Address. I only need to provide the ASA with one routable IP Adderess. The documentation isn't very helpful so I did a little research on the modems capabilities. The Motorola cable modem is basically my gateway access point for my network. To try and simplify my questions what do I need to remove from the ASA in order to make it work. My modem (Motorola SURFboard SB6120) receives an IP Address from Comcast. Wow, my lack of knowledge with this ASA is really showing.
Otherwise, if it's in bridge mode, the ASA will be automatically assigned the public ip address from comcast so all traffic traversing the ASA will be NATed to that public ip address.
CISCO ASA 5505 ASDM PLUS
Plus you would need to make sure that your modem is also performing NAT so traffic can be NATed on the modem. However, if your modem is in routed and NAT mode, then the ethernet interface on the modem that connects to the ASA outside interface will be on its own subnet (non-routable most likely), eg: modem: 192.168.0.1, ASA outside interface: 192.168.0.2, then on the ASA you would need to configure: The ASA interface can be configured as DHCP assigned or PPPoE assigned.įor DHCP assigned, the command: ip address dhcp setrouteįor PPPoE assigned, please find the configuration reference: Is your comcast modem in bridge mode or routed mode? You can't assign ip address that is assigned to comcast modem to the ASA. It doesn't work like this on ASA firewall. Policy-map type inspect dns preset_dns_mapĬryptochecksum:3c7122107295abd78ac56f6c33b21b9a
CISCO ASA 5505 ASDM PASSWORD
Username xxxxxx password xxxxxxxxxxxx encrypted privilege 15 Username xxxxx password xxxxxxxxxxxx encrypted privilege 15 No threat-detection statistics tcp-intercept
Snmp-server enable traps snmp authentication linkup linkdown coldstartĬrypto ipsec security-association lifetime seconds 28800Ĭrypto ipsec security-association lifetime kilobytes 4608000ĭhcpd address 192.168.1.2-192.168.1.33 inside Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absoluteĭynamic-access-policy-record DfltAccessPolicy Icmp unreachable rate-limit 1 burst-size 1 Ip address 7.7.0.1 255.255.255.0 (sample IP - I removed my ISP IP for this post)
0 kommentar(er)
