cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
340
Views
1
Helpful
8
Replies

how to configure a firewall for a local network with multiple subnets?

araujo180
Level 1
Level 1

hi need some help with configuration of this firewall i already use the basic configuration and it doesn't let anything pass through . the network in the top is the outside and the one on the bottom should be the outside. I don't know if I have to change anything in the configuration of the firewall or maybe in the topology of the network. if you know how to do this please let me know.

araujo180_0-1736521027980.png

 

1 Accepted Solution

Accepted Solutions

@araujo180 

 I tried to setup the ASA as DHCP but it seems it only offer DHCP for the direct connected network, as we can see on the message below

"Address range subnet 192.168.1.10 or 192.168.1.100 is not the same as inside interface subnet 200.168.0.1"

Meaning, you can not provide DHCP for remote network which is the case for you scenario.

About the routes, I added two static route. One in the router4, connected to outide

ip route 0.0.0.0 0.0.0.0 200.168.0.1

 

and another one on the router5

ip route 0.0.0.0 0.0.0.0 201.168.1.1

 

And I redistributed both route on the RIP.

router rip

redistribute static

View solution in original post

8 Replies 8

@araujo180 

Hard to say anything without seeing the configuration. But, at least you need access-list and access-group applied to the outside interface.

You can attach yout PAcketTracert file here and I can take a look. Just zip it first.

@Flavio Miranda 

here is the file i would really appreciate if you could help me to know what i need to do. also i need to configure the firewall as a dhcp server if you can help me with that to i would really appreciate it.

I will. Just need a few hours as I am out of my computer now. Will let you know 

 Any special reason to use the firewall as DHCP server?

its basically for an online lab that i am doing that ask for it and i dont know if have to change the normal configuration in this case. 

@araujo180 

 Your firewall seems to be fine. What I found missing was route on routers. I dont see the need for DHCP on firewall but if you reallly need to put DHCP server on firewall just tell me which network will be attended with Firewall as DHCP.

For now, you setup seems pretty decent to me.

 

FlavioMiranda_0-1736531408900.png

 

well the networks that need the firewall to provide dhcp are the three in the bottom. so for the routers I need to add route to outside the network?

@araujo180 

 I tried to setup the ASA as DHCP but it seems it only offer DHCP for the direct connected network, as we can see on the message below

"Address range subnet 192.168.1.10 or 192.168.1.100 is not the same as inside interface subnet 200.168.0.1"

Meaning, you can not provide DHCP for remote network which is the case for you scenario.

About the routes, I added two static route. One in the router4, connected to outide

ip route 0.0.0.0 0.0.0.0 200.168.0.1

 

and another one on the router5

ip route 0.0.0.0 0.0.0.0 201.168.1.1

 

And I redistributed both route on the RIP.

router rip

redistribute static

ok now what was happening thanks you very much for your help.

Review Cisco Networking for a $25 gift card