Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Firewalls Community


ASAv on UCS E-Series blade on ISR 4K - Routed Mode

Hello All, 


I am trying to configure an UCS-E Box with ASAv installed on it at VMWare side. If you see the Diagram it will be more easier considering what I am thinking to execute. 


ISR router model is UCS-E140S-M2/K9 with in built switch installed on it. My plan is at the Switch Module users will connect with gateway whose L3 is configured as an Inside Interface of ASA ( installed at  UCS_E Vmware ). Having said that traffic from switch module for a User machine connected at switch module need to go to ASA Inside Interface and through ASA Outside Interface Traffic will go to Internet or Other Side of the VPN. 


Used G0/0/0 as WAN connection of the router and then used VNIC0 / UCSE1/0/0 treating as the WAN side of the ASA.   


interface Loopback10

 ip address



interface ucse1/0/0

 ip unnumbered Loopback10

 negotiation auto

 switchport mode trunk

 no mop enabled

 no mop sysid


and then used VNIC1 / UCSE1/0/1 with BDI500 treating as the connection of ESXI VNIC 1 which is eventually the Inside Interface of ASA. 



interface BDI500

 ip address


interface ucse1/0/1

 no ip address

 no negotiation auto

 switchport mode trunk

 no mop enabled

 no mop sysid

 spanning-tree cost 10

 service instance 500 ethernet

  encapsulation dot1q 500

  rewrite egress tag push dot1q 500

  bridge-domain 500


But when I try to use one switch port while assigning an ip of with GW 1.1 at Laptop I am not able to Ping to even though BDI Interface shows UP from router. 


interface GigabitEthernet0/1/0

 switchport access vlan 500

 switchport mode access


Router#sh arp

Protocol  Address          Age (min)  Hardware Addr   Type   Interface

Internet               13   a0e0.afe0.8ce5  ARPA   ucse1/0/0

Internet           -   00aa.6ef6.2760  ARPA   GigabitEthernet0/0/0

Internet             -   00aa.6ef6.27e3  ARPA   BDI500


Any thoughts what configuration I am doing wrong ?