Hello All!
I'm in the process of configuring some Cisco gear and learning as I go.
I have a pair of ASA 5520's configured for Active/Standby configuration
with an inside, DMZ and outside using a single context.
Hosts in the DMZ are using private addresses. I've got the inside
working fine and hosts in the DMZ can access those hosts at the
inside interface they require.
I'm now ready to work my way up to the outside interface and my 2811
routers. I picked the DSL to start on first but what I thought was going
to be straightforward isn't looking that way. I'm a wee bit confused
and I'm hoping someone can point me in the right direction.
I have a DSL connection setup on the 2811 and I can establish a
link to the ISP with no problem. Once up, I am able to ping outside
hosts from within the router.
I was given the following info from the ISP (addresses masked to
protect the innocent):
Gateway: xxx.yyy.126.137
IPs: xxx.yyy.126.138 - xxx.yyy.126.142 (five total)
Subnet: 255.255.255.248
Note: dialer1 interface in 2811 has the gateway address as it's IP address
statically defined.
I found an example on Cisco for a PIX/ASA setup using a single ISP
which made me think the solution would be to:
1) Assign one of the IP addresses (lets pick xxx.yyy.126.138) to the
inside interface of the 2811 (FA0/0 in this case).
2) Create sub-interfaces on the ASA interface, assigning each one of the
remaining public ip addresses from above.
3) Then setup NAT to translate between the Inside, DMZ and these public
addresses.
Unfortunately I'm getting stuck at #1. When I try to assign that address
to FA0/0 (2811) it spits out an error:
"% xxx.yyy.126.136 overlaps with Dialer1"
I can see the IP address on the interface with show run but it will not
allow me to "no shutdown" the interface... So clearly I'm doing something
stupid here but I can't find any examples in my books or online to
get me pointed the right way.
I know in the past when I played with this router I was able to configure things
if I had NAT configured on it but I was hoping to avoid that and keep it on
the ASA only. The final goal is to connect my three 2811's to the ASA's and configure the 2811's for GLBP which from what I read is messy with NAT on the
router.
Any help would be greatly appreciated!!!
Terry
P.S. -> I didn't include the router config since it only has a basic DSL setup
and an attempt at configuring FA0/0 - didn't think I needed to post it. If
needed, I can.
I'm in the process of configuring some Cisco gear and learning as I go.
I have a pair of ASA 5520's configured for Active/Standby configuration
with an inside, DMZ and outside using a single context.
Hosts in the DMZ are using private addresses. I've got the inside
working fine and hosts in the DMZ can access those hosts at the
inside interface they require.
I'm now ready to work my way up to the outside interface and my 2811
routers. I picked the DSL to start on first but what I thought was going
to be straightforward isn't looking that way. I'm a wee bit confused
and I'm hoping someone can point me in the right direction.
I have a DSL connection setup on the 2811 and I can establish a
link to the ISP with no problem. Once up, I am able to ping outside
hosts from within the router.
I was given the following info from the ISP (addresses masked to
protect the innocent):
Gateway: xxx.yyy.126.137
IPs: xxx.yyy.126.138 - xxx.yyy.126.142 (five total)
Subnet: 255.255.255.248
Note: dialer1 interface in 2811 has the gateway address as it's IP address
statically defined.
I found an example on Cisco for a PIX/ASA setup using a single ISP
which made me think the solution would be to:
1) Assign one of the IP addresses (lets pick xxx.yyy.126.138) to the
inside interface of the 2811 (FA0/0 in this case).
2) Create sub-interfaces on the ASA interface, assigning each one of the
remaining public ip addresses from above.
3) Then setup NAT to translate between the Inside, DMZ and these public
addresses.
Unfortunately I'm getting stuck at #1. When I try to assign that address
to FA0/0 (2811) it spits out an error:
"% xxx.yyy.126.136 overlaps with Dialer1"
I can see the IP address on the interface with show run but it will not
allow me to "no shutdown" the interface... So clearly I'm doing something
stupid here but I can't find any examples in my books or online to
get me pointed the right way.
I know in the past when I played with this router I was able to configure things
if I had NAT configured on it but I was hoping to avoid that and keep it on
the ASA only. The final goal is to connect my three 2811's to the ASA's and configure the 2811's for GLBP which from what I read is messy with NAT on the
router.
Any help would be greatly appreciated!!!
Terry
P.S. -> I didn't include the router config since it only has a basic DSL setup
and an attempt at configuring FA0/0 - didn't think I needed to post it. If
needed, I can.