ASA/FWSM 7.2 VLSM

jwjorgensen · ‎03-07-2007

Do you guys know of any reason why I would be getting ip address conflicts when trying to set up the following scenario:

outside-x.x.x.34/30

inside1-x.x.x.37/29

inside2-x.x.x.45/29

It would appear as if the firewall is not handling VLSM very well.

any thoughts...

Jon Marshall · ‎03-07-2007

Hi

It's not the FWSM it's the subnet ranges you are using.

/29 = 248.

256 - 248 = 8

So your /29 networks go up in 8

x.x.x.8

x.x.x.16

x.x.x.24

x.x.x.32

But you have used x.x.x.32 with a /30 subnet mask so you have an overlapping address range.

You could do

inside1 x.x.x.41/29

inside2 x.x.x.49/29

HTH

Jon

jwjorgensen · ‎03-07-2007

Yeah......

I figured that out a little bit after I posted the question. I am trying to look up the operator error on the bug toolkit.

Jon Marshall · ‎03-07-2007

:-)

You won't find it - i've been looking for the last couple of years !!