Basic ASA 5505: 2 ISP connections; possible?

[JMCraig]

Hi Folks,

I think I may need something other than what I've got (rats). What I need to be able to do is have a LAN with two different distinct sets of public IPs from my ISP (apparently I need to be able to set up two external ports/VLANs on the 5505--one for each block of IPs).

So, what it looks like I've got (with the basic licensing) is one external, one internal, and one DMZ. So, is there a way to configure the internal VLAN to be an external one and make the "DMZ" VLAN behave like an internal VLAN (traffic in and out)--or, am I stuck with buying the "Security Plus" license (that appears to open things up considerably)?

Thanks for any insight!


John Craig
Alpha-G Consulting, LLC

http://www.alphagconsulting.com

 

[unclerico]

i would just go with the sec+ license

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[JMCraig]

Thanks for the reply, unclerico.

Turns out the ISP (to which I have this really nice fiber connection) will only talk to one MAC address on my end of the wire anyway--so having two independent connections isn't going to be of any interest after all. (This is turning into a real mess!)

W/o the sec+ license, is there a way to allow traffic to originate from the DMZ VLAN and go out to the Internet? (Am I remembering that's a restriction of the basic license? Mostly just curious about that; not sure I need a DMZ anyway.)



John Craig
Alpha-G Consulting, LLC

http://www.alphagconsulting.com

 

[NetworkDOC]

No there is no way without the extra license.