Cisco asa changing the outside ip address

<Tags>

Cisco ASA-Changing the Outside IP Address Problem I see this question get asked a lot on forums, most people never touch the firewall, 'if it's working leave it alone'. And that's great until you move offices, or get a newer faster (or cheaper) Internet connection.

What if you have lots of public IP addresses? What if you have VPN's (or AnyConnect clients). What's the best way to do this with a minimum of downtime?

Note: If you get your all your outside IP details via DHCP, and no one speaks you you from outside (i.e. The ISP always reserves and issues the same IP details to you because you have a mail server or have VPN connections etc). Then you can probably simply plug into the new Router/Modem/Socket and reboot the ASA. Solution

Time spent on reconnaissance is seldom wasted.

OK let’s not run to the comms rack with a laptop and get stuck into the problem, get all your ducks in a row first.

1. Your Current Internet Connection: I know you're going to turn this off, but if there's a problem and everything 'goes to hell in a hand cart', you might need to connect back to this one in a hurry, (best not to look like a clown because you deleted all those settings and don't know what they are). As a bare minimum have the following; •

ISP Name.

•

ISP Tech Support phone number.

•

IP Address(s) allocated to you from the ISP. (Including the subnet mask and IP of their router if applicable).

•

Username and Passwords for your Internet Connection (if applicable i.e. for ADSL, PPPoEetc).

•

The details, of any public DNS records that point to you i.e. The MX records for your email, or URLs for any web services you host etc. If you have a web portal for managing this make sure you can log in. Or if your ISP handles this, get the information on how you can change your host records to point to the new IP address, (i.e. a fax on company headed notepaper, or a call to your account manager etc).

Info from http://www.petenetlive.com/KB/Article/0001081.htm