How to configure ASA firewall and cisco switch 3560 to deliver below project

[ismailmorakinyo3]

Hi,

Please, i have an issue with a small project am handling in my office...

I want to set up a NOC for our customers about four of them on  a
separate network from existing office network.

I have a 5506-x asa firewall with plus license and a 3560 switch for the setup.

I want to be able to have 4 vlans, one for each customer

I want to be able to to do s2s vpn to each customer

I want to be able to have internet on 4pcs connected to the switch on each vlan.

Please assist.

[Dennis Mink]

Sounds like your home work. What have you got so far and where are you getting stuck??

[ismailmorakinyo3]

Thank you for your quick response:

I have loaded the security plus license on the ASA 5506-X for me to be able to create more vlans 

I have created four vlans on the firewall and configured the outside interface that will be connected to the ISP.

The challenge now is how to propagate the vlans to the switch and how to ensure there is internet connection whenever i connect PC to the switch on the four vlans.

Also i want to be able to setup site-to-site vpn between my firewall and customers firewall 

Thanks in advance

[ismailmorakinyo3]

Kindly find attached the sketch for what i want to achieve

[balaji.bandi]

here is the basic config to start with :

Switch

interface GigabitEthernet1/0/1   << --- change the port connect toASA
switchport mode trunk

!

interface gi 1/0/2

switchport access

swich port access vlan 1

!

interface gi 1/0/2

switchport access

swich port access vlan 2

ASA

interface GigabitEthernet1/X   << where this port connect to switch
no nameif
no security-level
no ip address
!
interface GigabitEthernet1/x.1
vlan 1
nameif Inside_vlan1
security-level 100

ip address 192.168.1.1 255.255.255.0

!

interface GigabitEthernet1/x.2
vlan 2
nameif Inside_vlan2
security-level 100

ip address 192.168.2.1 255.255.255.0

!

interface GigabitEthernet1/x.3
vlan 3
nameif Inside_vlan3
security-level 100

ip address 192.168.3.1 255.255.255.0