How provide communication between two interfaces

[Janardhan Meesala]

Dear Support-Team,

Is it possible to provide communication between two different interfaces which had configured as different
security level in ASA 5510 ???

Regards,

Janardhan

[Jennifer Halim · Accepted solution]

Yes you can. This depends on whether the traffic is initiated from low to high security level, or high to low security level.

There are different configuration options.

From  low to high, you are required to have static NAT statement or NAT  exemption with ACL as well as ACL to allow traffic through that is  applied to the low security level interface.

From high  to low, by default it is allowed through automatically, but if you have  ACL applied to the high security level interface, then you would need to  explicitly allow the traffic.

[Janardhan Meesala]

Hi ,

Thanks for your response....

Below is the my network details:

Inside-1 : security level 100 - 192.168.1.0/24     inside interface IP is 192.168.1.1/24

Inside-2 : security level 50 - 192.168.2.0/24       inside-2 interface IP is 192.168.2.1/24

Outside : Security level 0 - 192.168.100.0/24     ioutside interface IP is 192.168.100.1/24

I configured Dynamic PAT for inside-1 and inside-2 with outside interface to get internet as shown configuration below.

object network inside-1
subnet 192.168.1.0 255.255.255.0
nat (inside-1,outside) dynamic interface

object network inside-2
subnet 192.168.2.0 255.255.255.0
nat (inside-2,outside) dynamic interface

All my users are getting internet....

Here i want provide communiction between inside-1 , inside-2 and outside..

i.e  inside-1 to inside-2 and vice versa

     inside-1 to outside

     inside-2 to outside

Here my IOS version is 8.3 and my device is ASA 5510.....

Please send me the configuration for my requirement..

Thanks in advance...

Regards,

Janardhan

[Jennifer Halim]

I assume that the following you have configured correctly:

inside-1 to outside, configuration:

object network inside-1
  subnet 192.168.1.0 255.255.255.0
  nat (inside-1,outside) dynamic interface

inside-2 to outside, configuration:

object network inside-2
  subnet 192.168.2.0 255.255.255.0
  nat (inside-2,outside) dynamic interface

For  inside-1 to inside-2, here is the configuration:

object network obj-192.168.1.0

     subnet 192.168.1.0 255.255.255.0

nat (inside-1,inside-2) source static obj-192.168.1.0 obj-192.168.1.0