topic Re: How to configure ASA firewall and cisco switch 3560 to deliver below project in Network Security

How to configure ASA firewall and cisco switch 3560 to deliver below project

ismailmorakinyo3 — Fri, 21 Feb 2020 17:26:30 GMT

Hi,

Please, i have an issue with a small project am handling in my office...

I want to set up a NOC for our customers about four of them on a
separate network from existing office network.

I have a 5506-x asa firewall with plus license and a 3560 switch for the setup.

I want to be able to have 4 vlans, one for each customer

I want to be able to to do s2s vpn to each customer

I want to be able to have internet on 4pcs connected to the switch on each vlan.

Please assist.

Re: How to configure ASA firewall and cisco switch 3560 to deliver below project

Dennis Mink — Fri, 30 Aug 2019 03:15:32 GMT

Sounds like your home work. What have you got so far and where are you getting stuck??

Re: How to configure ASA firewall and cisco switch 3560 to deliver below project

ismailmorakinyo3 — Fri, 30 Aug 2019 03:39:36 GMT

Thank you for your quick response:

I have loaded the security plus license on the ASA 5506-X for me to be able to create more vlans

I have created four vlans on the firewall and configured the outside interface that will be connected to the ISP.

The challenge now is how to propagate the vlans to the switch and how to ensure there is internet connection whenever i connect PC to the switch on the four vlans.

Also i want to be able to setup site-to-site vpn between my firewall and customers firewall

Thanks in advance

Re: How to configure ASA firewall and cisco switch 3560 to deliver below project

ismailmorakinyo3 — Fri, 30 Aug 2019 03:54:02 GMT

Kindly find attached the sketch for what i want to achieve

Re: How to configure ASA firewall and cisco switch 3560 to deliver below project

balaji.bandi — Fri, 30 Aug 2019 07:46:26 GMT

here is the basic config to start with :

Switch

interface GigabitEthernet1/0/1 << --- change the port connect toASA
switchport mode trunk

interface gi 1/0/2

switchport access

swich port access vlan 1

interface gi 1/0/2

switchport access

swich port access vlan 2

ASA

interface GigabitEthernet1/X << where this port connect to switch
no nameif
no security-level
no ip address
!
interface GigabitEthernet1/x.1
vlan 1
nameif Inside_vlan1
security-level 100

ip address 192.168.1.1 255.255.255.0

interface GigabitEthernet1/x.2
vlan 2
nameif Inside_vlan2
security-level 100

ip address 192.168.2.1 255.255.255.0

interface GigabitEthernet1/x.3
vlan 3
nameif Inside_vlan3
security-level 100

ip address 192.168.3.1 255.255.255.0