Hello,
I have a kind of small but complex network.
Recently I realized their is routing problem which not diverting HTTP traffic to the right leased line.
Problem : HTTP/HTTPS traffic not going through leased line which is only for HTTP/HTTPS traffic
Goal : Need to configure Cisco L3 switch which seems to have malfunctioned to resume HTTP traffic
Scenario :-
-2 ASA 5510 plain firewalls [ with no extra security modules. ]
-1 Cisco 3560 L3 switch & 1 3COM L3 switch.
- 2 Leased lines
- 1 leased line is for HTTP, 2nd 1 is for site to vpn
- Cisco 1841 router
Floor 1
ISP [ for VPN ]>> Cisco 1841 router >>> 8 port switch >> Cisco 5510 ASA
>>> L3 switch >> LAN distribution
LAN subnets = 10.100.10.x , 193.168.1.x
Gateways configured on above ASA = 10.100.10.1 & 193.168.1.100
As of now can not reach 193.168.1.100 gateway from 10.x subnet but can reach from 193.168.1.x subnet
Above gateways configured on ethernet interfaces of ASA.
VPN's are configured in this ASA
L3 switch has 193.168.2.1 IP and 10.100.10.70
Floor 2
ISP Mux [ for HTTP ]>> Cisco ASA 5510 >> Cisco 3560 L3 switch >>> LAN distribution
Squid proxy with IP 193.168.1.8
routing is configured in proxy and gateway fixed is 193.168.1.100
No policies in this ASA. Just simple allow any any policy.
No routing/IP records found in Cisco l3 switch.
As of now if I go to whatismyip it shows IP of my ISP at Floor 1.
It means my proxy isnt forwarding http traffic to link on Floor 2.
What settings shall I make in cisco L3 switch to ensure that HTTP traffic will pass by HTTP link?
Some additional info >> on 1st floor ASA I have added internal proxy IP in allowed server list. Rest PC's has deny http access.
Squid proxy has only 1 lan card. As of now PC's in both LAN's reachable except gateways of 193.x subnet.
I tried rebooting ASA's,router,L3 switches. No use.
Regards,
Amey.
