cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

839
Views
0
Helpful
4
Replies
vgiyenko
Beginner

ASA 5505 to allow internet from external vlans

Hello all.

I am facing the following issue: I have a layer 3 switch (3560) with multiple VLANs. The ASA (8.3) allowes internet access to only one VLAN at a time. I attempt to configure the ASA 5505 to allow all these VLANs access to the internet.

Any help is welcome.

2 ACCEPTED SOLUTIONS

Accepted Solutions
vishaw jasrotia
Beginner

Hello .

Yes you can do the same . For that you have to do the NAT for these VLAN's.

Rest depends upon your connectivity , distribution ou your subnets , Interface created on ASA.

Thanks

View solution in original post

Julio Carvajal
Advisor

Hello,

As vishad said this is supported.

You could do this if the ASA connects have multiple interfaces connecting to the Vlans.

nat (any,outside) after-auto source dynamic any interface and that will do it

If the ASA only connects to the inside for the entire vlans (using routing) do

nat (inside,outside) after-auto source dynamic any interface

route inside x.x.x.x .x.x.x.x IP_Address_L3_Switch  (For all of the vlans)

Looking for some Networking Assistance? 
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

4 REPLIES 4
vishaw jasrotia
Beginner

Hello .

Yes you can do the same . For that you have to do the NAT for these VLAN's.

Rest depends upon your connectivity , distribution ou your subnets , Interface created on ASA.

Thanks

Julio Carvajal
Advisor

Hello,

As vishad said this is supported.

You could do this if the ASA connects have multiple interfaces connecting to the Vlans.

nat (any,outside) after-auto source dynamic any interface and that will do it

If the ASA only connects to the inside for the entire vlans (using routing) do

nat (inside,outside) after-auto source dynamic any interface

route inside x.x.x.x .x.x.x.x IP_Address_L3_Switch  (For all of the vlans)

Looking for some Networking Assistance? 
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
vgiyenko
Beginner

Thank you all for the suggesions. I will give it a try. Will let you know of the outcome.

vgiyenko
Beginner

Than you guys. This worked for me.

Create
Recognize Your Peers
Content for Community-Ad