cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1092
Views
0
Helpful
4
Replies

ASA 5505 to allow internet from external vlans

vgiyenko
Level 1
Level 1

Hello all.

I am facing the following issue: I have a layer 3 switch (3560) with multiple VLANs. The ASA (8.3) allowes internet access to only one VLAN at a time. I attempt to configure the ASA 5505 to allow all these VLANs access to the internet.

Any help is welcome.

2 Accepted Solutions

Accepted Solutions

vishaw jasrotia
Level 1
Level 1

Hello .

Yes you can do the same . For that you have to do the NAT for these VLAN's.

Rest depends upon your connectivity , distribution ou your subnets , Interface created on ASA.

Thanks

View solution in original post

Julio Carvajal
VIP Alumni
VIP Alumni

Hello,

As vishad said this is supported.

You could do this if the ASA connects have multiple interfaces connecting to the Vlans.

nat (any,outside) after-auto source dynamic any interface and that will do it

If the ASA only connects to the inside for the entire vlans (using routing) do

nat (inside,outside) after-auto source dynamic any interface

route inside x.x.x.x .x.x.x.x IP_Address_L3_Switch  (For all of the vlans)

Looking for some Networking Assistance? 
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

4 Replies 4

vishaw jasrotia
Level 1
Level 1

Hello .

Yes you can do the same . For that you have to do the NAT for these VLAN's.

Rest depends upon your connectivity , distribution ou your subnets , Interface created on ASA.

Thanks

Julio Carvajal
VIP Alumni
VIP Alumni

Hello,

As vishad said this is supported.

You could do this if the ASA connects have multiple interfaces connecting to the Vlans.

nat (any,outside) after-auto source dynamic any interface and that will do it

If the ASA only connects to the inside for the entire vlans (using routing) do

nat (inside,outside) after-auto source dynamic any interface

route inside x.x.x.x .x.x.x.x IP_Address_L3_Switch  (For all of the vlans)

Looking for some Networking Assistance? 
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

vgiyenko
Level 1
Level 1

Thank you all for the suggesions. I will give it a try. Will let you know of the outcome.

vgiyenko
Level 1
Level 1

Than you guys. This worked for me.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: