LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 04-03-2008, 07:52 AM   #1
abefroman
Senior Member
 
Registered: Feb 2004
Location: Chicago
Distribution: CentOS
Posts: 1,266

Rep: Reputation: 53
1 public server, 1 private server with a Cisco ASA5505 inbetween, is this hard to do?


1 public server, 1 private server with a Cisco ASA5505 inbetween, is this hard to do?

I want to give my Cisco ASA5505 an IP like 10.0.0.2 and the server behind it 10.0.0.3, the server infront of it has two nics, one will be the public IP, the other 10.0.0.4.

I haven't used an ASA or PIX before but I am familiar with the Cisco IOS for switches. Is what I mentioned above commond for what the ASA is used for? Is there something else that would work better?
 
Old 04-03-2008, 08:42 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,414

Rep: Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966
not really seeing anything "interesting" there to be honest... are you maybe trying to use it transparently as a layer 2 firewall? if not then you'll need a different network on each side of the firewall, as currently you appear to only have the one.
 
Old 04-03-2008, 08:49 AM   #3
abefroman
Senior Member
 
Registered: Feb 2004
Location: Chicago
Distribution: CentOS
Posts: 1,266

Original Poster
Rep: Reputation: 53
Not interesting meaning its not to hard to do?

Right, there would be two networks a:
205.x.x.0/24
and a
10.0.0.0/24

Do I need two switches then or does the Cisco ASA5505 act as the second switch? Will I also need a router?
 
Old 04-03-2008, 09:21 AM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,414

Rep: Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966
well you're using words like "behind" and "infront" so that's suggesting a layer 3 boundary (which the asa can do, so no router, but it's two seperate networks of course)... you can use the 8 ports as a vlan capable switch too, yes.

Last edited by acid_kewpie; 04-03-2008 at 09:22 AM.
 
Old 04-03-2008, 09:44 AM   #5
abefroman
Senior Member
 
Registered: Feb 2004
Location: Chicago
Distribution: CentOS
Posts: 1,266

Original Poster
Rep: Reputation: 53
Does the Cisco ASA5505 act as a gateway? For the server that is only connected to that, with an IP fo 10.0.0.3, would it have to have a default gateway like 10.0.0.1 to be able to connect to the Cisco ASA5505?

Or do you only need a default gateway if its going to be accessible on the internet?
 
Old 04-03-2008, 11:08 AM   #6
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,414

Rep: Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966
I think you're getting your network terminologies a little mixed up here. a "gateway" is a layer 3 routing point - a firewall or a router, you can't buy a physical thing called a "gateway". The phrase "Default Gateway" is just a very simplistic way to refer to a route of last resort, which is also normally the first resort on a standard server.

I'm still concerned that you're only saying the 5505 has one ip, when it'll need at least 2 to be a layer 3 device.
 
Old 04-03-2008, 01:11 PM   #7
abefroman
Senior Member
 
Registered: Feb 2004
Location: Chicago
Distribution: CentOS
Posts: 1,266

Original Poster
Rep: Reputation: 53
Thanks for your help, I will test this out and let you know how it goes.
 
Old 04-08-2008, 09:13 PM   #8
abefroman
Senior Member
 
Registered: Feb 2004
Location: Chicago
Distribution: CentOS
Posts: 1,266

Original Poster
Rep: Reputation: 53
What are the advantages to using the ASA instead of second switch?
 
Old 04-09-2008, 12:56 AM   #9
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,414

Rep: Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966
erm, they are *totally* different things to do totally different jobs... can't really compare them...
 
Old 04-09-2008, 04:43 PM   #10
ARC1450
Member
 
Registered: Jun 2005
Location: Odenton, MD
Distribution: Gentoo
Posts: 290

Rep: Reputation: 30
Quote:
Originally Posted by acid_kewpie View Post
erm, they are *totally* different things to do totally different jobs... can't really compare them...
Awww, come on. Sure ya can. Give it a shot.

As for my vantage point? The ASA, if configured properly, will keep you from getting pwnt.
 
Old 04-10-2008, 03:43 AM   #11
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,414

Rep: Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966Reputation: 1966
well on average an ASA will run hotter than say a Catalyst 2960 or a 3560. as such they'd probably make a better foot stool in the cold mornings.
 
Old 04-10-2008, 07:56 AM   #12
ARC1450
Member
 
Registered: Jun 2005
Location: Odenton, MD
Distribution: Gentoo
Posts: 290

Rep: Reputation: 30
Quote:
Originally Posted by acid_kewpie View Post
well on average an ASA will run hotter than say a Catalyst 2960 or a 3560. as such they'd probably make a better foot stool in the cold mornings.
hahaha!

You've sold me. *runs out to buy an ASA*
 
Old 04-10-2008, 09:39 AM   #13
abefroman
Senior Member
 
Registered: Feb 2004
Location: Chicago
Distribution: CentOS
Posts: 1,266

Original Poster
Rep: Reputation: 53
Quote:
Originally Posted by acid_kewpie View Post
well on average an ASA will run hotter than say a Catalyst 2960 or a 3560. as such they'd probably make a better foot stool in the cold mornings.
I had a coworker that rested his feet on him computer, and his power supply was burning up, it was a cold day so he didn't think anything of it, until time minutes later the thing started smoking. LOL
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SSH with passwordless public/private key not working on another account on server infocom Linux - Server 14 12-27-2010 05:09 AM
DNS Server (bind9) works on the private network but not in the public one! wjleon Linux - Networking 26 01-24-2009 08:14 PM
VPN Server: need help setting up a public server accessible by win xp clients hamish Linux - Networking 6 09-20-2006 02:39 AM
public vs private ip emailssent Linux - Networking 2 09-28-2004 02:11 AM
Web Server on private IP lambmt Linux - Networking 4 09-29-2003 02:40 PM


All times are GMT -5. The time now is 12:41 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration