Presales question: External IP address assigned through DHCP and /29 routed to this IP, possible?

Reply
Highlighted
L0 Member

Presales question: External IP address assigned through DHCP and /29 routed to this IP, possible?

Hi all,

 

I am considering to replace my Cisco ASA 5505 by a PA-220.

My situation is as follows:

  1. The external interface is part of a trunk where internet connectivity is delivered on a specific VLAN.
  2. The IP address on the external interface is assigned by DHCP which unfortunately is mandatory.
  3. A public /29 subnet is routed to that DHCP assigned IP address. This /29 subnet is part of a different subnet than the DHCP assigned IP address.
  4. I am able to use the /29 subnet to publish internal servers with private IP addresses to the internet where it doesn't matter in which internal private subnet these machines are located (DMZ, LAN).

As soon as the ASA has a NAT rule and a security rule it will happily start forwarding packets the the published server. There is no need to assign any of the /29 IP addresses to any interfaces. For ease of management I just create an object for each IP address (x.x.x.x/32) and use it in the NAT rules.

 

Before I'm going to buy a PA-220 I need to know if it can do this as well.

So far studying the documentation and knowledge base I figured out that 1 and 2 should be no problem. But I can not find anything on 3 and 4.

 

So the big question is can the PA-220 do 3 and 4?

If yes how?

 

Regards,

Han.

 

Highlighted
Cyber Elite

Hi @HaVaNL 

 


@HaVaNL wrote:

As soon as the ASA has a NAT rule and a security rule it will happily start forwarding packets the the published server. There is no need to assign any of the /29 IP addresses to any interfaces. For ease of management I just create an object for each IP address (x.x.x.x/32) and use it in the NAT rules.


On the PA this works in exactly the same way, so yes also point 3 and 4 are possible.

 

Regards,

Remo

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!