[cisco-voip] ASA Configuration

Ahmed Elnagar aelnagar at ACT-EG.COM
Tue Oct 2 05:47:23 EDT 2007


You can use a configuration called (as I remember) NAT zero, it can help
you when you don't need to NAT on the firewall while you still need to
pass traffic from it. But really no need to but two firewalls behind
each others (unless you are using different vendors)

 

-----Original Message-----
From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Mike Lyon
Sent: Friday, September 14, 2007 12:07 AM
To: Kevin Dunn
Cc: cisco voip
Subject: Re: [cisco-voip] ASA Configuration

 

Why are you double firewalling it?

 

-Mike

 

 

On 9/13/07, Kevin Dunn <kevinddunn at gmail.com> wrote:

> We currently have a Firewall in place with a public address.

> I need to place an ASA between the Internet router and the original

> firewall.

> 

> But those devices are on the same subnet and I can't have the outside
and

> inside interfaces on the same subnet in the ASA.

> 

> Can I get around that without double NATing the incoming packets?

> 

> ** I know this isn't a VOIP question, but we are placing the ASA to
allow

> VOIP traffic...sorry guys just looking for clues**

> 

> Kevin D. Dunn

> Network Engineer

> Marathon Cheese

> _______________________________________________

> cisco-voip mailing list

> cisco-voip at puck.nether.net

> https://puck.nether.net/mailman/listinfo/cisco-voip

> 

_______________________________________________

cisco-voip mailing list

cisco-voip at puck.nether.net

https://puck.nether.net/mailman/listinfo/cisco-voip

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20071002/fd3fd1b6/attachment-0001.html 


More information about the cisco-voip mailing list