cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


162
Views
0
Helpful
0
Replies
Highlighted
Beginner

ASAv on UCS E-Series blade on ISR 4K - Routed Mode

Hello All, 

 

I am trying to configure an UCS-E Box with ASAv installed on it at VMWare side. If you see the Diagram it will be more easier considering what I am thinking to execute. 

 

ISR router model is UCS-E140S-M2/K9 with in built switch installed on it. My plan is at the Switch Module users will connect with gateway whose L3 is configured as an Inside Interface of ASA ( installed at  UCS_E Vmware ). Having said that traffic from switch module for a User machine connected at switch module need to go to ASA Inside Interface and through ASA Outside Interface Traffic will go to Internet or Other Side of the VPN. 

 

Used G0/0/0 as WAN connection of the router and then used VNIC0 / UCSE1/0/0 treating as the WAN side of the ASA.   

 

interface Loopback10

 ip address 10.1.1.1 255.255.255.0

 

 

interface ucse1/0/0

 ip unnumbered Loopback10

 negotiation auto

 switchport mode trunk

 no mop enabled

 no mop sysid

 

and then used VNIC1 / UCSE1/0/1 with BDI500 treating as the connection of ESXI VNIC 1 which is eventually the Inside Interface of ASA. 

 

!

interface BDI500

 ip address 192.168.1.1 255.255.255.0

 

interface ucse1/0/1

 no ip address

 no negotiation auto

 switchport mode trunk

 no mop enabled

 no mop sysid

 spanning-tree cost 10

 service instance 500 ethernet

  encapsulation dot1q 500

  rewrite egress tag push dot1q 500

  bridge-domain 500

 

But when I try to use one switch port while assigning an ip of 192.168.1.0/24 with GW 1.1 at Laptop I am not able to Ping to 192.168.1.1 even though BDI Interface shows UP from router. 

 

interface GigabitEthernet0/1/0

 switchport access vlan 500

 switchport mode access

 

Router#sh arp

Protocol  Address          Age (min)  Hardware Addr   Type   Interface

Internet  10.1.1.2               13   a0e0.afe0.8ce5  ARPA   ucse1/0/0

Internet  100.100.100.1           -   00aa.6ef6.2760  ARPA   GigabitEthernet0/0/0

Internet  192.168.1.1             -   00aa.6ef6.27e3  ARPA   BDI500

 

Any thoughts what configuration I am doing wrong ?