Presales question: External IP address assigned through DHCP and /29 routed to this IP, possible?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Presales question: External IP address assigned through DHCP and /29 routed to this IP, possible?

L0 Member

Hi all,

 

I am considering to replace my Cisco ASA 5505 by a PA-220.

My situation is as follows:

  1. The external interface is part of a trunk where internet connectivity is delivered on a specific VLAN.
  2. The IP address on the external interface is assigned by DHCP which unfortunately is mandatory.
  3. A public /29 subnet is routed to that DHCP assigned IP address. This /29 subnet is part of a different subnet than the DHCP assigned IP address.
  4. I am able to use the /29 subnet to publish internal servers with private IP addresses to the internet where it doesn't matter in which internal private subnet these machines are located (DMZ, LAN).

As soon as the ASA has a NAT rule and a security rule it will happily start forwarding packets the the published server. There is no need to assign any of the /29 IP addresses to any interfaces. For ease of management I just create an object for each IP address (x.x.x.x/32) and use it in the NAT rules.

 

Before I'm going to buy a PA-220 I need to know if it can do this as well.

So far studying the documentation and knowledge base I figured out that 1 and 2 should be no problem. But I can not find anything on 3 and 4.

 

So the big question is can the PA-220 do 3 and 4?

If yes how?

 

Regards,

Han.

 

1 REPLY 1

L7 Applicator

Hi @HaVaNL 

 


@HaVaNL wrote:

As soon as the ASA has a NAT rule and a security rule it will happily start forwarding packets the the published server. There is no need to assign any of the /29 IP addresses to any interfaces. For ease of management I just create an object for each IP address (x.x.x.x/32) and use it in the NAT rules.


On the PA this works in exactly the same way, so yes also point 3 and 4 are possible.

 

Regards,

Remo

 

  • 2040 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!