Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a small office network that currently consists of about 10 machines, a gigabit switch, and a router/firewall, in a fairly obvious configuration. I need to add a Cisco ASA 5505 to support a VPN connection to a third party for multiple machines on the network. My question is how would you usually set this up? Specifically, what network topology would you use?

I think my confusion stems from the fact that I now have two routers to deal with. I would prefer to only present the machines on the network with a single gateway interface to as to be able to avoid managing static routes on each machine.

share|improve this question

If the ASA is yours (as in you own it), I would consider using it to replace whatever Internet router you're currently using.

Otherwise, all you need to do is add a static route on your current Internet router pointing to the ASA for the subnet behind the VPN.

share|improve this answer
Agreed. Given the simple arrangement (no other reasons noted) -- replace your existing Internet edge firewall with the ASA 5505. It will prevent a lot of headaches. – Weaver Nov 27 '12 at 6:17

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.