[cisco-voip] ASA Configuration

Kenny Kant kenny.kant at running-config.com
Thu Oct 4 00:30:27 EDT 2007


Not sure what you are trying to do with the ASA here.  But you are
concerned with IP issues have you considered running the ASA in
transparent mode?

Kenny



On Tue, 2007-10-02 at 11:47 +0200, Ahmed Elnagar wrote:
> You can use a configuration called (as I remember) NAT zero, it can
> help you when you don’t need to NAT on the firewall while you still
> need to pass traffic from it. But really no need to but two firewalls
> behind each others (unless you are using different vendors)
> 
>  
> 
> -----Original Message-----
> From: cisco-voip-bounces at puck.nether.net
> [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Mike Lyon
> Sent: Friday, September 14, 2007 12:07 AM
> To: Kevin Dunn
> Cc: cisco voip
> Subject: Re: [cisco-voip] ASA Configuration
> 
>  
> 
> Why are you double firewalling it?
> 
>  
> 
> -Mike
> 
>  
> 
>  
> 
> On 9/13/07, Kevin Dunn <kevinddunn at gmail.com> wrote:
> 
> > We currently have a Firewall in place with a public address.
> 
> > I need to place an ASA between the Internet router and the original
> 
> > firewall.
> 
> > 
> 
> > But those devices are on the same subnet and I can't have the
> outside and
> 
> > inside interfaces on the same subnet in the ASA.
> 
> > 
> 
> > Can I get around that without double NATing the incoming packets?
> 
> > 
> 
> > ** I know this isn't a VOIP question, but we are placing the ASA to
> allow
> 
> > VOIP traffic...sorry guys just looking for clues**
> 
> > 
> 
> > Kevin D. Dunn
> 
> > Network Engineer
> 
> > Marathon Cheese
> 
> > _______________________________________________
> 
> > cisco-voip mailing list
> 
> > cisco-voip at puck.nether.net
> 
> > https://puck.nether.net/mailman/listinfo/cisco-voip
> 
> > 
> 
> _______________________________________________
> 
> cisco-voip mailing list
> 
> cisco-voip at puck.nether.net
> 
> https://puck.nether.net/mailman/listinfo/cisco-voip
> 
> 
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip



More information about the cisco-voip mailing list