[cisco-voip] ASA Configuration
Ahmed Elnagar
aelnagar at ACT-EG.COM
Tue Oct 2 05:47:23 EDT 2007
You can use a configuration called (as I remember) NAT zero, it can help
you when you don't need to NAT on the firewall while you still need to
pass traffic from it. But really no need to but two firewalls behind
each others (unless you are using different vendors)
-----Original Message-----
From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Mike Lyon
Sent: Friday, September 14, 2007 12:07 AM
To: Kevin Dunn
Cc: cisco voip
Subject: Re: [cisco-voip] ASA Configuration
Why are you double firewalling it?
-Mike
On 9/13/07, Kevin Dunn <kevinddunn at gmail.com> wrote:
> We currently have a Firewall in place with a public address.
> I need to place an ASA between the Internet router and the original
> firewall.
>
> But those devices are on the same subnet and I can't have the outside
and
> inside interfaces on the same subnet in the ASA.
>
> Can I get around that without double NATing the incoming packets?
>
> ** I know this isn't a VOIP question, but we are placing the ASA to
allow
> VOIP traffic...sorry guys just looking for clues**
>
> Kevin D. Dunn
> Network Engineer
> Marathon Cheese
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20071002/fd3fd1b6/attachment-0001.html
More information about the cisco-voip
mailing list