Re: ASA active/backup

Don't use the Real(public) IP's on the outside interfaces of the ASA, have
the CE router do the NATing utilizing your outside Serial
interface/ethernet interface of your router, reserve your public IP's for
the ASA with natting for applications if you want, and have static routes
on your CE router for your PUBLIC Ips back to your ASA
 this will protect
your ASA as well from being publicly probed.

On 11/6/12 10:21 AM, "amin" <amin_at_axizo.com> wrote:

>Hello dear
>
>Can I configure Active/Standby backup if one of the segments will connect
>three devices and the mask is /30, I mean just two IPs are available?
>
>ASA primary 1.1..1.1/30 ==== == 1.1.1.2/30 ISP router
>
>ASA secondary IP? How I can manage that if no free IPS on for it?
>
>
>
>Regards,
>
>Amin
>
>
>Blogs and organic groups at http://www.ccie.net
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Nov 06 2012 - 10:32:40 ART