How to configure router in front of firewall

Question

We are putting a Cisco 2611 in front of ASA 5510 to accept a DS3 circuit.  After circuit activation, 2611 can get out to Internet, but both internal user and ASA cannot access Internet.
The design is as following
Internal user <-> ASA e0/1
ASA e0/0 <-> 2611 gi0/0
2611 s1/0 <-> Internet. 
Internal user - ASA - 2611 - Internet
I'm not sure if I require additional NAT on 2611.  Can someone please provide help on troubleshooting this?
ASA has following config:
int e0/0
desc to 2611
nameif ISP
security-level 0
ip address 10.10.10.2 255.255.255.252
int e0/1
desc to internal
nameif internal
security-level 50
ip address 192.168.1.0 255.255.255.0
global (ISP) 1 interface
nat (internal) 1 192.168.1.0 255.255.255.0
route ISP 0.0.0.0 0.0.0.0 10.10.10.1
2611 has following config:
int gi0/0
desc to ASA
ip address 10.10.10.1 255.255.255.252
int s1/0
desc to Internet
ip address x.x.x.x x.x.x.x
Thank you,

Answer 1

Thank you John,
The ISP only provided a /30 block, and we won't be able to do the second option you suggested.  I configured nat on 2611 as following:
int gi 0/0
desc to ASA
ip address 10.10.10.1 255.255.255.252
ip nat inside
int s1/0
desc to Internet
ip address 2.2.2.2 255.255.255.252
ip nat outside
ip nat inside source static 10.10.10.1 2.2.2.1 //2.2.2.1 being ISP
ip route 0.0.0.0 0.0.0.0 2.2.2.1
ip route 192.168.1.0 255.255.255.0 10.10.10.2
ASA
int e0/0
desc to 2611
nameif ISP
security-level 0
ip address 10.10.10.2 255.255.255.252
int e0/1
desc to internal
nameif internal
security-level 50
ip address 192.168.1.0 255.255.255.0
global (ISP) 1 interface
nat (internal) 1 192.168.1.0 255.255.255.0
route ISP 0.0.0.0 0.0.0.0 10.10.10.1
Would this work?
Thank you,
Woo