Help with inter-vlan routing using ASA 5505

[bwander99]

Hope someone can help with this common problem.  Have a couple of vlans configured on an ASA 5505 and I can't pass traffic between them.

specifically trying to pass traffic between vlan1 and vlan10

Thanks for the help.

[devils_advocate]

Can you diagram your setup for us?

Thanks

[bwander99]

[devils_advocate]

Presumably this is the connection to the 2960x switch?

interface Ethernet0/1

Are your clients able to ping their default gateways on the Vlans?

[bwander99]

correct.  ASA 5505 e0/1 connects to 2960x G1/0/44

correct.  vlan 1 client PC can ping 192.168.1.1  and vlan 10 client PC can ping 192.168.10.1

[devils_advocate]

Unlike a Router, an ASA appliance will try and NAT traffic going from one internal subnet to another.

You need to add a static NAT per subnet, as below:

static (inside,PHONE) 192.168.1.0 192.168.1.0 netmask 255.255.255.0
static (PHONE,inside) 192.168.10.0 192.168.10.0 netmask 255.255.255.0