Reviews:
 ·Time Warner Cable
 ·Verizon FiOS
 ·Clearwire Wireless
| ASA 5505 Firewall Help My company is using an ASA 5505 to VPN into a cloud storage server. I need this same device to assign over 500 private IPs on the internal LAN. I've looked at different options but can't find anywhere I can subnet for more private IPs. Any thoughts?
On that note if this device can't do it and recommendations on a router that can handle a large private network?
Thanks for any and all help. |
|
| ASA can do DHCP and VLANs. The one gotcha about this watch your licence level on the ASA before
installing / configuring! If you have a BASE licence, you're limited to 10 or 50 trusted hosts and 3 VLANs.
If you have 500 internal hosts, I'd probably look to a seperate device to do DHCP and let the ASA handle
firewall / VPN duties.
To check your licence level, do a "show ver" from the CLI and post up the results.
My 00000010bits
Regards |
|
|
|
BinkVillains... knock off all that evil
join:2006-05-14
Denver, CO
kudos:4 | reply to megatron266
500 IPs? I second HELLFIRE  —setup a DHCP server. This is not really the job of a firewall. |
|
cramer
join:2007-04-10
Raleigh, NC
kudos:7 | reply to megatron266
While it has a simple DHCP server, it won't handle 500 addresses. And you'll need an unlimited license (vs. 10 or 50 hosts, which it measures by IP address, and vpn clients count even though they are technically inside hosts.) |
|
 RyanG1Premium
join:2002-02-10
San Antonio, TX | reply to megatron266
not to mention its limited to 10,000/25,000 connections depending on licensing... this doesnt even have bandwidth figured in.
for 500 hosts id be looking at a 5520 at the minimum for implementation.
just my 2 cents
Ryan
--
Human beings, who are almost unique in having the ability to learn from the experience of others, are also remarkable for their apparent disinclination to do so. -Douglas Adams |
|
| reply to megatron266
ok great thanks for your suggestions. now any good equipment out there dedicated to being a DHCP server? i know i could setup a windows machine but i'd rather a piece of equipment to setup and go. |
|
BinkVillains... knock off all that evil
join:2006-05-14
Denver, CO
kudos:4 | reply to megatron266
DHCP is not resource intensive. You could easily deploy a low-end CF-based system running a UNIX-like OS with dhcpd. |
|
