Cisco ASA with U-Verse DSL

I’ve received a couple of requests for help in configuring the Cisco ASA5505 with U-Verse DSL.  Here’s a summary of how I made it work.  Feel free to contact me for further assistance.  I’ll do what I can to help out:

Setting up the U-Verse residential gateway with my ASA5505 was the most difficult part of my installation.  The tech knew nothing beyond basic networking, nor did the guy on the phone.

Here is what you need to do:

1). Connect only the outside interface of your ASA to your RG (residential gateway), disconnect everything else for now.  You’ll see why in a minute.
2). Log on to the RG, http://192.168.1.254 (I think).  The password is on a sticker on the RG.
3). Go into the firewall options and look for an option called DMZ Plus.  You should see the MAC of your ASA in a selection box.  Once you set that up, the RG will pass its public IP right through to the outside interface of your ASA.
4). Configure the ASA’s outside interface for DHCP.  It should then pickup your public IP.

I’ve then uplinked another switch to the RG for my TV’s to plug into.

Its tricky, but it does work.  I’m not at home right now, so I might have a term or two confused as I’m pulling this out of my head, which is loaded with cold medicine right now.  But that was basically it.

If you don’t pass the public into the outside interface of the ASA, you end up with a double-NAT situation which will screw up most forms of VoIP.  I have a SIP trunk from Junction Networks and an Asterisk box for my home.

Let me know if you need further info.

One Comment

  1. jwhelan:

    Hey there,

    I got the URL here from your sig at the uverseusers forum. We actually live in the same neighborhood (Eagles Watch), I just moved in about a month ago. The uverse website says it’s not availble for me, but it looks like you’ve got it hooked up for you. Seems from here (and the fact that you’re running an ASA instead of the run of the mill cable/dsl router) you’re somewhat technology oriented - would be cool to know others of the same ilk in the area (I’m in network security).

    feel free to drop me a line via email.

Leave a comment

You must be logged in to post a comment.