Help Center

Version 2.0

Related Articles

• Configuring Cisco PIX 501 Firewall Access Rules
• Accessing the Cisco PIX 501 Firewall Device Manager
• Changing Cisco PIX 501 Hardware Firewall Passwords
• Creating Cisco PIX 501 Firewall Graphs
• Configuring Simple Control Panel DNS with Cisco ASA 5505 Hardware Firewall
• Why Do I Get Certificate Errors When I Connect To Cisco PIX 501 Firewall Device Manager?
• Cisco PIX 501 Firewall Data Specifications

Adding IP Addresses to Your Server's Cisco ASA 5505 Firewall (Traditional)

WARNING: We have multiple configuration methods for our servers' networking. To make sure you use the correct procedure when configuring additional IPs on your server, please see Adding IP Addresses to Your Dedicated Server.

Some of the information in this article is advanced material we make available as a courtesy. Please be advised that you are responsible for properly following the procedures below. Customer Support cannot assist with these topics.

When you receive additional IPs for your server, you have to configure your server and firewall to accept requests from them.

NOTE: We configure all of your server's IP addresses automatically whenever you reprovision your server. However, reprovisioning erases all content from your server's hard drives. For more information, see Is there a way for me to start over with my dedicated server?

We automatically configure additional IP addresses for Virtual Private Servers (VPS).

To configure additional IPs, you must create two static translation rules, one outside traffic and one for inside traffic.

NOTE: For this example, we assume that the next available internal IP address is 10.0.0.2.

To Add an IP Address to the Cisco ASA 5505 Firewall

1. In a Web browser, navigate to https://[your firewall management IP address]/. For more information, see Accessing Your Server's Firewall Console.

   NOTE: Depending on which Cisco ASDM version you have installed, several options might display. If so, click Run ASDM Applet.

2. You may receive a number of security certificate warnings. If you accept the certs and save them as "Trusted," you avoid warnings in the future.
3. When prompted, enter your User name and Password, and then click OK. You are prompted to log in twice.

   NOTE: Your browser must have Java enabled allow pop-ups from your management IP.

4. In the Device Manager toolbar, click Configuration.
5. Click Firewall.
6. On the left, click NAT.
7. Under Configuration > Firewall > NAT Rules, click + Add, and then select Add Static NAT Rule.
8. The remaining steps depend on which information displays:

If you are presented with:

(If you are not presented with this, click here.)

Make the following changes, and then click OK:

• ORIGINAL
  • Interface — Select inside.
  • Source — Type 10.0.0.2.
• TRANSLATED
  • Interface — Select outside.
  • Use IP Address — Enter your new IP address.

Now you need to add a second static NAT rule.

1. Under Configuration > Firewall > NAT Rules, click + Add, and then select Add Static NAT Rule.
2. Complete the on-screen fields, and then click OK:
   • ORIGINAL
     • Interface — Select outside.
     • Source — Enter your new IP address.
   • TRANSLATED
     • Interface — Select inside.
     • Use IP Address — Type 10.0.0.2.
3. Click Apply.
4. Close the Firewall Device Manager, and then click Save.
5. Add the internal IP address to your server. For more information, click here.

If you are presented with:

Make the following changes, and then click OK:

• REAL ADDRESS
  • Interface — Select inside.
  • IP Adress — Type 10.0.0.2.
  • Netmask — Type 255.255.255.255.
• STATIC TRANSLATION
  • Interface — Select oustide.
  • IP Address — Enter your new IP address.

Now you need to add a second static NAT rule.

1. Click OK.
2. Under Configuration > Firewall > NAT Rules, click + Add, and then select Add Static NAT Rule.
3. Complete the on-screen fields, and then click OK:
   • REAL ADDRESS
     • Interface — Select outside.
     • IP Adress — Enter your new IP address.
     • Netmask — Type 255.255.255.255.
   • STATIC TRANSLATION
     • Interface — Select inside.
     • IP Address — Type 10.0.0.2.
4. Click Apply.
5. Close the Firewall Device Manager, and then click Save.
6. Add the internal IP address to your server.

NOTE: We monitor IP address allocation. Attempting to add IP addresses to your server that you did not purchase violates your terms of service agreement and may result in the suspension of your account.

• Not helpful
• Somewhat helpful
• Helpful
• Very Helpful
• Solved my problem