topic Re: How to handle remote traffic with ASA ? in Network Security

How to handle remote traffic with ASA ?

vinayak — Mon, 11 Mar 2019 19:12:24 GMT

Hello all,

I am having 2 branches (Head office & Branch office). I am having MPLS Connectivity between them.

I am having MPLS & Internet connection (2 seprate Links) @ my head office. & having only MPLS @ my branch office.

I want my branch office will use internet through my Head office connection using MPLS..

I am having RV042 Routers at both sites. & having CISCO ASA 5510 @ Head office which is connected after my RV042 Router.

I want my Brach office (Remote site) should also follow the rules & resctrictions that i applied in ASA @ head office.

is this possible ? & how to do it ?

Thank..

Re: How to handle remote traffic with ASA ?

vinayak — Mon, 22 Nov 2010 06:15:34 GMT

Can Anyone Reply on this post ???

Re: How to handle remote traffic with ASA ?

vinayak — Mon, 22 Nov 2010 08:09:32 GMT

Anyone There ?

Re: How to handle remote traffic with ASA ?

praprama — Mon, 22 Nov 2010 16:19:09 GMT

Hi Vinayak,

It should be possible. Could you attach a topology of your network so that we can have a better idea of things and make suggestions accordingly?

Cheers,

Prapanch

Re: How to handle remote traffic with ASA ?

vinayak — Tue, 23 Nov 2010 04:28:51 GMT

Dear Ramamoorthy,

Thanks for reply..

I am attaching Network Diagram for your reference.

Plaese help me to allow all my brach traffic should pass through ASA @ Head office.

Re: How to handle remote traffic with ASA ?

vinayak — Tue, 23 Nov 2010 10:17:32 GMT

Hello,

I Attached my Network Diagram..

Can anyone help me out.

Re: How to handle remote traffic with ASA ?

praprama — Tue, 23 Nov 2010 13:05:25 GMT

Hi Vinayak,

So looking at your topology, first off you need to ensure all internet bound traffic from yourr branch office needs to come on the ASAs outside interface (172.18.10.1). The RV042 router at the head office needs to be configured to send all traffic from the branch office LAN to the ASA rather than sending it out the WAN link.

When this packet comes on the ASA, the below commands should be used:

same-security-traffic permit intra-interface

nat (outside) 1 192.168.1.0 255.255.255.0

global (outside) 1 interface

If you have an access-list on the ASAs outside interface, you will need to allow this traffic as well. Assuming your outside interface ACL is named OUTSIDE, the ACL will be of the below format:

access-list OUTSIDE line 1 permit ip 192.168.1.0 255.255.255.0 any

Please note that i have assumed the name of thr interface 172.18.10.1 to be "outside". Please replace it with what is actually in place.

Let me know if this helps!!

Cheers,

Prapanch

Re: How to handle remote traffic with ASA ?

vinayak — Tue, 23 Nov 2010 13:23:50 GMT

Dear Prapanch,

Thanks for ur reply..

i will try this config.

Can u tell me how i will transfer the traffice from Branch RV042 Router to Head office RV042 Router ?

& Is MPLS Connectivity possible on RV042 ?

Thanks..

Re: How to handle remote traffic with ASA ?

praprama — Tue, 23 Nov 2010 13:42:40 GMT

Hi Vinayak,

That question will be best answered in the Small Business community as that router belongs to cisco's small business class of routers:

https://supportforums.cisco.com/community/netpro/small-business

Please post your query there and we can then see how it goes.

Cheers,

Prapanch