Prev: ASA 5550 behind ASA 5505
Next: QoS and the Catalyst 4506e
From: Dogg Child on 7 Jun 2010 08:13
Subject correction.

--


....
:: Dogg.Child:::Honored.member.of.The.Wu-Tang.Clan ::

dogg[AltGr+V]nkc-sisak.hr
....


"Dogg Child" <dogg[AltGr+V]@nkc-sisak.hr> wrote in message
news:huinph$c52$1(a)ss408.t-com.hr...
> Hi all,
>
> excuse me at first if i don't explain this properly, i'll try...
> I have one internet link, and two ASA5505's, and two "networks" that need
> access from and to internet.
> The main idea is that 1st 5505 would be configured with 3 interfaces -
> In,Out, DMZ.
> Through DMZ i would forward all traffic from one public ip (exmpl.
> x.x.x.5) to 2nd 5505. Basically DMZ on 1st 5505 would be connected to Out
> interface on 2nd 5505, and not filtering anything.
> Out interf. on 1st 5505 would have other pub ip (exmpl. x.x.x.4).
> Behind both 5505's i have different subnets that requiers some access from
> and to the internet.
>
> q1: Would that kind of wiring and connecting work?
>
> q2: if that would work, is it possible to configure / limit
> speed/bandwidth for DMZ "link"?
>
> q3: i guess when 2nd 5505 initiate IPsec tunnel (site-to-site) that the
> 1st one wouldn't be aware of that (licence issues?) ?
>
> q4: all services that needs to be accessible from the internet behind 2nd
> 5505 would be accessible if configured only on 2nd 5505 ?
>
> that's it so far, i hope i wouln't bother you anymore.
>
> Tnx in advance & regards,
> --
>
>
> ...
> :: Dogg.Child:::Honored.member.of.The.Wu-Tang.Clan ::
>
> dogg[AltGr+V]nkc-sisak.hr
> ...
>
>
>


 | 
Pages: 1
Prev: ASA 5550 behind ASA 5505
Next: QoS and the Catalyst 4506e