ASA5505 With Sky Fibre Max

bomber456 · 6 Oct 2016 at 13:58

Hi,
Just wondering if anyone has been able to configure a cisco 5505 with sky fibre max?
Didn't realize it doesn't use standard pppoe authentication like BT does, that was working fine.

ASA ---> VIGOR130 ---> EXCHANGE

Sky uses MER and option 61 dhcp to get an ip address, and that isn't available with the ASA5505 that i'm aware? Version 9.2(4)

anyone got any suggestions as an alternative way to do this?

leigh_boy · 6 Oct 2016 at 14:31

im not familiar with the vigor 130 but i have mine set up like this ..

ASA ---> Draytek2860 ---> EXCHANGE

the draytek is true DMZ to the mac address of asa5505 port 0/0 and the asa is set to get the ip via dhcp

bomber456 · 6 Oct 2016 at 14:47

leigh_boy said:
im not familiar with the vigor 130 but i have mine set up like this ..

ASA ---> Draytek2860 ---> EXCHANGE

the draytek is true DMZ to the mac address of asa5505 port 0/0 and the asa is set to get the ip via dhcp

the vigor 130 is just a modem :
http://www.draytek.co.uk/products/business/vigor-130

does the draytek2860 pass the public IP through to the ASA outside interface then?

cheers

bremen1874 · 6 Oct 2016 at 17:35

They will pass the WAN IP through to a connected device (well the previous versions did anyway). Google 'True IP DMZ Host'.

bomber456 · 21 Oct 2016 at 13:31

leigh_boy said:
im not familiar with the vigor 130 but i have mine set up like this ..

ASA ---> Draytek2860 ---> EXCHANGE

the draytek is true DMZ to the mac address of asa5505 port 0/0 and the asa is set to get the ip via dhcp

Hi,
I've got the 2860 now, and doing the true DMZ config using the MAC of my ASA does give me the outside IP, but i haven't figured out how to get traffic initiated from the WAN to pass through to my inside. so my client vpn to the ASA and plex port 32400 doesnt get to my ASA.

leigh_boy · 21 Oct 2016 at 14:11

you need to set up network objects and then access rules / Nat rules. if your not savvy wit the ASA or ASDM you tube will get you through it but you wont understand what your doing initially

if you share the config but hide the external ip i can try and help you

bomber456 · 21 Oct 2016 at 16:10

leigh_boy said:
you need to set up network objects and then access rules / Nat rules. if your not savvy wit the ASA or ASDM you tube will get you through it but you wont understand what your doing initially

if you share the config but hide the external ip i can try and help you

the issue is getting the traffic through to the ASA, ive got the required NAT / ACL rules on the ASA, but getting the public inbound traffic to actual come through the draytek is the issue. I thought all traffic would get through to the ASA. currently i've switched it to have a private IP address on the ASA using the DMZ host, which now passes all traffic for the public address through to the ASA - something i thought would work when i used the true ip dmz option...