Home network setup - incorporating Cisco ASA 5505

Question

I am planning to imlpement an ASA 5505 in my home network and I am wondering if this is a valid configuration. I am wondering if it is necessary to have 3 separate internal subnets or if these can be cabeled together in a more efficient fashion?

I plan to keep the 2 servers (game, e-mail) branched off the ASA directly in a DMZ configuration. The rest of the clients connect through the wireless/wired router.

Any unforseen problems with a setup like this (Modem -> Firewall -> Internal Router)? I have read sites that say I will have to accept an IP via DHCP for the ASA's external interface.

Below is my planned network diagram.

Answer 1

Why have an ASA if you are just going to DMZ your machines? and why have one on NAT as well? and the servers will only be in a DMZ on their particular subnet, they'll still be behind the firewall of the cable modem. Why an additional subnet for the wireless - why not just have an access point and not NAT+DHCP?

Try to get your ISP to bridge the cable modem. Use the ASA as your primary router. Don't DMZ your servers, just open the appropriate ports. Run your wireless as an access point on the same subnet. All this will GREATLY simplify the setup and connectivity within and to your network and will save you a lot of frustration.