Monday, March 18, 2019

L3 Switch to ASA

Hello all.

Trying to insert an ASA into the network where there was only a L3 switch before connected to a static ip connection.

On the ASA (using ASDM)

gig 0/2 inside enabled security 100 ip 172.30.1.2 255.255.255.252 desc: Link to L3 Switch

gig 0/0 outside enabled security 0 ip (DHCP)

[New connection is using DDNS for inbound interfaces...budget cuts yay]

one route set up:

inside 0.0.0.0 0.0.0.0 <gateway IP> metric 1 options none

I set up a nat rule:

On the 3750G

interface gigabitethernet1/0/52

no switchport

ip address 172.30.1.1 255.255.255.252

end

I know these are talking to each other, as I can ping each from each other.

What I have not managed to do thus far is to get any traffic to the ASA itself, I think.

I have one outbound route:

0.0.0.0 0.0.0.0 172.30.1.2

I have vlans 10, 20, 30 (none associated to the above IP addresses)

I'm trying to get nat rules so that vlans 10 & 20 have access outbound but 30 does not (at least not here).

I thought it would be going into NAT rules and adding network objects for vlan 10 and 20, and then that would be it.

I have thus far been completely incorrect.

Oh jeez Rick. I can't. I can't even ping googles from the ASA CLI. Oh God Oh Jeeeez.



No comments:

Post a Comment