Basic network config

SassySassy · ‎03-09-2010

Hi,

Im new to cisco, so only very basic knowledge now. Trying improve though by setting up a network with cisco equipment.

Here is what i wanna set up:

Are there any guides or anything on how to configure th router, switch and ASA's?

EasyVPN is no important yet, its just the interfaces and the 2 VLAN's.

The ASA 5505's on left both need to have one VLAN on it with address pool 172.16.0.0/24.

Any guides for this kind of stuff? particular the switch and router?

Ganesh Hariharan · ‎03-09-2010

Hi,

Im new to cisco, so only very basic knowledge now. Trying improve though by setting up a network with cisco equipment.

Here is what i wanna set up:

Are there any guides or anything on how to configure th router, switch and ASA's?

EasyVPN is no important yet, its just the interfaces and the 2 VLAN's.

The ASA 5505's on left both need to have one VLAN on it with address pool 172.16.0.0/24.

Any guides for this kind of stuff? particular the switch and router?

Hi,

Check out the below links

http://www.articlesbase.com/networks-articles/stepbystep-configuration-guide-for-the-cisco-asa-5505-firewall-803076.html

http://servinet.net/Portals/122/5505GSG.pdf

http://www.opennet.ru/soft/cisco-configuration.html

Hope to Help !!

Rember to rate the helpful post

Ganesh.H

cdelafuente31 · ‎03-10-2010

Hello,

I think two useful resources for ASA are:

Getting started guides:

http://www.cisco.com/en/US/products/ps6120/prod_installation_guides_list.html

And configuration examples and technotes:

http://www.cisco.com/en/US/products/ps6120/prod_configuration_examples_list.html

Best Regards,

César.

SassySassy · ‎03-11-2010

Thanks for the guides guys, they did help.

I managed to configure the ASA 5505's but im having trouble with the router...

The router is a Cisco 831 model,

To describe the current situation a bit:

ASA 1 is connected to the 831 router on port 1

ASA 1 outside ip = 10.1.0.1

the Switch 2960 is connected with switch port 1 to the 831 router on router port 2

ASA 2 is connected to the switch on port 2

ASA 2 outside ip = 10.1.0.2

ASA 2 inside ip range = 172.16.0.1/24

ASA 2 PC client has IP 172.16.0.2

ASA 3 is connected to the switch on port 3

ASA 3 outside ip = 10.1.0.3

ASA 3 inside ip range = 172.16.1.1/24

ASA 3 PC client has IP 172.16.1.2

*see placement in the picture in post 1, together it should make sense

How can I configure the 831 router to properly forward the traffic so i can ping ASA 1 from both PC clients?

Anyone know what commands to use?

Thanks in advance!

cdelafuente31 · ‎03-11-2010

I think this might work.

In the router:

ip route 172.16.0.0 255.255.255.0 10.1.0.2

ip route 172.16.1.0 255.255.255.0 10.1.0.3

ip route 192.108.254.0 255.255.255.0 10.0.0.1

In the ASA1:

route outside 172.16.0.0 255.255.255.0 10.0.0.2 1

route outside 172.16.1.0 255.255.255.0 10.0.0.2 1

In the ASA2:

route outside 192.108.254.0 255.255.255.0 10.1.0.1 1

route outside 10.0.0.0 255.255.255.0 10.1.0.1 1

In the ASA3:

route outside 192.108.254.0 255.255.255.0 10.1.0.1 1

route outside 10.0.0.0 255.255.255.0 10.1.0.1 1

Ganesh Hariharan · ‎03-11-2010

Thanks for the guides guys, they did help.

I managed to configure the ASA 5505's but im having trouble with the router...

The router is a Cisco 831 model,

To describe the current situation a bit:

ASA 1 is connected to the 831 router on port 1

ASA 1 outside ip = 10.1.0.1

the Switch 2960 is connected with switch port 1 to the 831 router on router port 2

ASA 2 is connected to the switch on port 2

ASA 2 outside ip = 10.1.0.2

ASA 2 inside ip range = 172.16.0.1/24

ASA 2 PC client has IP 172.16.0.2

ASA 3 is connected to the switch on port 3

ASA 3 outside ip = 10.1.0.3

ASA 3 inside ip range = 172.16.1.1/24

ASA 3 PC client has IP 172.16.1.2

*see placement in the picture in post 1, together it should make sense

How can I configure the 831 router to properly forward the traffic so i can ping ASA 1 from both PC clients?

Anyone know what commands to use?

Thanks in advance!

Hi,

what is the subnet between router and switch ,Genrally what i would recommend a easy solution make a common subnet for router port connecting to switch and ASA2 and ASA3 conecting in switch and if you want ASA2 and ASA3 client wants to ping ASA1 then drop route in both the ASA2 and 3 towards router port which is connected towards the l2 switch.

and in Router drop reverse route towards clients subnet with respect to ASA 2 and ASA3 interface.

let say router interface ip 10.1.4.2/24 --- switch --- ASA2(10.1.4.3/24) and ASA3(10.1.4.4/24)

route to ASA1 subnet in ASA2 and ASA3 will route outside 10.3.1.0 255.255.255.0 10.1.1.4.2 and in router will be reverse route towards the client subnet say ip route 172.16.1.0 255.255.255.0 10.1.4.3 for ASA2 client and ip route 172.16.2.0 255.255.255.0 10.1.4.4 for ASA3.

Hope to Help !!

Remember to rate the helpful post

Ganesh.H