ASA 5510 InterVlan Routing and internet access

Unanswered Question
Feb 24th, 2008

Hi,

My topolgy is like this.

ISP--->Router--->ASA5510 Firewall--->cisco2960 48 port switch in VLAN--->Small 8 and 16 port switches to for respective VLAN.

Here Want to achieve internet access and separate network for individual department.

Got the public IP on the outside interface of the firewall say (59.x.x.x) and configured it.Now to achive the desired result I am planning to have something like below menteioned config on my ASA.

Assume you have 4 networks 2.2.2.0, 3.3.3.0, 4.4.4.0, 5.5.5.0

ASA5510

interface ethernet0/2

speed 100

duplex full

nameif LAN

security-level 50

no ip address

interface Ethernet0/2.2

vlan 2

nameif vlan2

security-level 50

ip address 2.2.2.1 255.255.255.0

interface Ethernet0/2.3

vlan 3

nameif vlan3

security-level 50

ip address 3.3.3.1 255.255.255.0

interface Ethernet0/2.4

vlan 4

nameif vlan4

security-level 50

ip address 4.4.4.1 255.255.255.0

interface Ethernet0/2.5

vlan 5

nameif vlan5

security-level 50

ip address 5.5.5.1 255.255.255.0

global (outside) 1 interface

nat(vlan2) 1 2.2.2.0 255.255.255.0

nat(vlan3) 1 3.3.3.0 255.255.255.0

nat(vlan4) 1 4.4.4.0 255.255.255.0

nat(vlan5) 1 5.5.5.0 255.255.255.0

And on switch side:

Switch_2960:

vlan database

vtp transparent

vtp domain test_lab

vtp password cisco

vlan 2 name VLAN2_2.2.2.0/24

vlan 3 name VLAN3_3.3.3.0/24

vlan 4 name VLAN4_4.4.4.0/24

vlan 5 name VLAN5_5.5.5.0/25

etc....

Interface fastethernet0/48

Description trunk_Connection_ASA_Ethernet03

speed 100

duplex full

switchport mode trunk

switchport trunk encapsulation dot1q

switchport trunk allowed vlan 2,3,4,5 etc..

And then say from port no. 2 cable going to small 8or 16 port linksys switch and so on for port 3 and 4.

Questions:

1. Do I need to configure anything else on ASA side as far as natting is concerned.I just want to allow internet access to all the VLAN.

2. Can I keep my cisco 2960 L2 switch as VTP Server mode?

3. Will the small switches(8/16 port of linksys) interfaces will allow the traffic to flow desired subnet.These small switches are unmanaged?Will this work without trunking.

Suggest me same configuration scenrios for the same as well.

Thanks In advance.

Reg,

Sushil

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

Actions

This Discussion