Adding IP Addresses to Your Server's Cisco ASA 5505 Firewall (Loopback)

WARNING: We have multiple configuration methods for our servers' networking. To make sure you use the correct procedure when configuring additional IPs on your server, please see Add more IP Addresses.

Some of the information in this article is advanced material we make available as a courtesy. Please be advised that you are responsible for properly following the procedures below. Customer Support cannot assist with these topics.

When you receive additional IPs for your server, you have to configure your server and firewall to accept requests from them.

We configure all of your server's IP addresses automatically whenever you reprovision your server. However, reprovisioning erases all content from your server's hard drives. For more information, see Starting over with My Server (Reprovision)

We automatically configure additional IP addresses for Virtual Private Servers (VPS).

To configure additional IPs, you must create two static translation rules, one for outside traffic and one for inside traffic.

For this example, we assume that the next available internal IP address is 10.0.0.2.

To Add an IP Address to the Cisco ASA 5505 Firewall

1. In a Web browser, navigate to https://[your firewall management IP address]/. For more information, see Accessing Your Server's Firewall Console.

   Depending on which Cisco ASDM version you have installed, several options might display. If so, click Run ASDM Applet.

2. You may receive a number of security certificate warnings. If you accept the certs and save them as "Trusted," you avoid warnings in the future.
3. When prompted, enter your server user name and firewall password, and then click OK. You are prompted to log in twice.

   Your browser must have Java enabled allow pop-ups from your management IP.

4. In the Device Manager toolbar, click Configuration.
5. Click Firewall.
6. On the left, click NAT.
7. Under Configuration > Firewall > NAT Rules, click + Add, and then select Add Static NAT Rule.
8. The remaining steps depend on which information displays:

If you are presented with:

(If you are not presented with this, click here.)

Make the following changes, and then click OK:

• ORIGINAL
  • Interface — Select inside.
  • Source — Type 10.0.0.2.
• TRANSLATED
  • Interface — Select outside.
  • Use IP Address — Enter your new IP address.

Now you need to add a second static NAT rule.

1. Under Configuration > Firewall > NAT Rules, click + Add, and then select Add Static NAT Rule.
2. Complete the on-screen fields, and then click OK:
   • ORIGINAL
     • Interface — Select outside.
     • Source — Enter your new IP address.
   • TRANSLATED
     • Interface — Select inside.
     • Use IP Address — Type 10.0.0.2.
3. Click Apply.
4. Close the Firewall Device Manager, and then click Save.
5. Add the internal IP address to your server. For more information, click here.

If you are presented with:

Make the following changes, and then click OK:

• REAL ADDRESS
  • Interface — Select inside.
  • IP Address — Type 10.0.0.2.
  • Netmask — Type 255.255.255.255.
• STATIC TRANSLATION
  • Interface — Select outside.
  • IP Address — Enter your new IP address.

Now you need to add a second static NAT rule.

1. Click OK.
2. Under Configuration > Firewall > NAT Rules, click + Add, and then select Add Static NAT Rule.
3. Complete the on-screen fields, and then click OK:
   • REAL ADDRESS
     • Interface — Select outside.
     • IP Adress — Enter your new IP address.
     • Netmask — Type 255.255.255.255.
   • STATIC TRANSLATION
     • Interface — Select inside.
     • IP Address — Type 10.0.0.2.
4. Click Apply.
5. Close the Firewall Device Manager, and then click Save.
6. Add the internal IP address to your server.

We monitor IP address allocation. Attempting to add IP addresses to your server that you did not purchase violates your terms of service agreement and may result in the suspension of your account.