Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Help with inter-vlan routing using ASA 5505

Hope someone can help with this common problem.  Have a couple of vlans configured on an ASA 5505 and I can't pass traffic between them.

 

specifically trying to pass traffic between vlan1 and vlan10

 

Thanks for the help.

Everyone's tags (1)
5 REPLIES

Can you diagram your setup

Can you diagram your setup for us?

 

Thanks

New Member

(No subject)

Presumably this is the

Presumably this is the connection to the 2960x switch?

interface Ethernet0/1

Are your clients able to ping their default gateways on the Vlans?

New Member

correct.  ASA 5505 e0/1

correct.  ASA 5505 e0/1 connects to 2960x G1/0/44

correct.  vlan 1 client PC can ping 192.168.1.1  and vlan 10 client PC can ping 192.168.10.1

Unlike a Router, an ASA

Unlike a Router, an ASA appliance will try and NAT traffic going from one internal subnet to another.

You need to add a static NAT per subnet, as below:

static (inside,PHONE) 192.168.1.0 192.168.1.0 netmask 255.255.255.0
static (PHONE,inside) 192.168.10.0 192.168.10.0 netmask 255.255.255.0

265
Views
0
Helpful
5
Replies