Helper address and ASA 5000 series
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-07-2013 01:29 AM - edited 03-11-2019 07:22 PM
Morning, I need a little clarity and advice setting up an ASA 5512-X, specifically how traffic is routed.
Currently at the edge I have an ASA 5510 which has been great but has limitations in the number of ports, the speed of the ports and module capacity so I purchased a 5512-X with IPS as a replacement.
Each comms cab within the LAN forms its own VLAN, in addition to this I have a server VLAN, a wireless VLAN and a management VLAN.
All clients within the various VLANs acquire an IP address from the DHCP server within the server VLAN - I do this by using the 'IP Helper Address' command on the core switches ( Cisco 4900Ms ) and this works well. In addition to this I have a helper address for the Microsoft Distribution Server for deploying images.
Traditionally the Wireless VLAN's traffic was forwarded directly out to the Internet via the firewall; but with the introduction of the VLE / Moodle server ( Virtual Learning Environment - teaching and learning resources ) in the server VLAN I would like to direct traffic from wireless clients directly to the VLE server bypassing the firewall so clients have access to the full 10Gb bandwidth rather then just the 1Gb at the firewall. At the same time I would like to direct all other traffic to a proxy which also resides in the server VLAN.
If I add the IPs of the VLE and proxy servers to the helper addresses would this resolve the issue or am I looking at this all wrong?
Many thanks in advance.
- Labels:
-
NGFW Firewalls
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-07-2013 03:43 AM
Hi,
all that ip helper does is transform UDP broadcast into unicast. Could you post a topology and explain how the wireless vlan is routed now and how you'd like it to be routed.
Regards
Alain
Don't forget to rate helpful posts.
