One LAN per interface - not communicating w/each other

[somethinglesspersonal]

Hello,

I have a Cisco ASA 5510 and we're only using two of the ports on it -- one for LAN and one for WAN. If I assign a third port 192.168.200.1, how to I get computers I plug into that port to communicate with the other LAN port (192.168.100.1)? Just set them at the same security level? In ASDM, there is a checkbox at the bottom of the main "Interfaces" page that says "Enable traffic between two or more interfaces which are configured with same secu..." but it doesn't finish the sentence. I'm assuming it finishes with "security levels" but when I check that I can't ping an IP on one interface from the other one I just set up. (i.e. can't ping 192.168.100.123 from a computer on the 192.168.200.x interface). Am I missing something? Seems like a very self explanatory checkbox to me. Thanks!

ASA Version 8.2(2)

ASDM Version 6.2(1)

Firewall mode: Routed

License: Security Plus

Physical Interfaces: Unlimited

VLANS: 100

Speaking of VLANS. I don't see anywhere in ASDM that mentions VLANS. Because the version of ASDM I have, are those options just not available in it and they need to be configured by CLI only? I have seen other ASA's where I can assign VLANS to interfaces but don't have those options on mine.

[Jon Marshall]

You can see from your packet tracer results that NAT is the issue.

Alain has posted a static NAT config you can use to get this working.

If you are doing anything remotely then you run a risk of something going wrong. Can't be helped really. So -

1) save the configuration as is before you do anything

2) add the NAT config and see if it works but don't save the config. If you need to you can reload the ASA.

The command Alain posted should not affect your access but you can never be sure so it always a good idea to have someone in the site you can get to power cycle the device if you lose access.

Jon

[danborchert]

"Alain has posted a static NAT config you can use to get this working."

Thanks Jon. That's exactly what I was looking for. At least a second opinion.