ASA 5505 as a router 1

[dvannoy]

I think I know the answer to this question but still need to ask.

client has DSL with one IP address only. currently has a linksys router but wants to install an ASA 5505.

with only one IP address could/should I use the ASA to act as a router and firewall?? and get rid of the current router?

or should I have the client get more public address's?

very simple network.

any info would be appreciated.

Thanks

 

[Supergrrover]

use the asa for both functions I unless there is complex routing in place. the extra router will just complicate things for you.


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[dvannoy]

OK,

thanks. that's what I thought.

now, I have one more question. I have configured a 5510 before but not a 5505. will I be able to change the inside int ip address? or do I have to keep it with what it's set to out of the box. someone was tellign me that the inside address cannot be changed. is that correct?

 

[Supergrrover]

You can change it. The only difference is that there is a built in switch and vlans are active (don't worry the defaults will work the way you want it to.)


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[wabob]

I have a Cisco 1811 router with an IOS firewall. This router has two routed ports (one of which connects to the ISP) and eight switched ports, from which I use one VLAN to connect to my PCs and printers, and a second VLAN for my girlfriend's son's PC only (it's loaded with spyware and malware - a hacker's dream - so I try to isolate it from my other equipment).

I have an ASA 5505 on the way. I would like to have two separate VLANs for the trusted inside network and one for the untrusted outside network (connecting to the ISP). Will I be able to duplicate the 1811 router's functionality completely with the new ASA 5505? Could it be a DHCP client to the ISP, and also act as a DHCP server for my PCs with two different network pools, then NAT/PAT both pools for internet connectivity?

In short, will I be able to maintain my current network connectivity without the 1811 router? Or, does the router need to be in front of the ASA 5505 like I have seen in some Visio drawings.

Any state, any entity, any ideology
that fails to recognize the worth, the dignity, the rights of man;
that state is obsolete.

Rod Serling, 1961

 

[Supergrrover]

wabob,
As long as you don't have complex router functions, then yes on all counts. My question is if it is working, why replace it?


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[wabob]

My home network is also a lab. I just want to try something different and gain some experience with the ASA 5505.

There's no better way for me to learn other than by getting my hands dirty...



Any state, any entity, any ideology
that fails to recognize the worth, the dignity, the rights of man;
that state is obsolete.

Rod Serling, 1961