10-16-2012 06:00 PM - edited 03-11-2019 05:10 PM
I have two virtual interfaces on my ASA 5520:
GigabitEthernet0/1.338 172.30.0.81/28
GigabitEthernet0/1.345 172.30.0.129/28
I have the security levels for both set to 50 and in the ASDM I have checked off "Enable traffic between two or more interfaces which are configured with same security levels"
But now the need has arisen that we allow each subnet to be routable to each other for SMTP traffic, how can I accomplish this?
Solved! Go to Solution.
10-16-2012 10:29 PM
here we go:
static (primero,SilverWheaton) 172.30.0.80 172.30.0.80 netmask 255.255.255.240
Then just a "clear xlate" if you have no ACL applied to both interfaces.
Otherwise, if you have ACL applied to the interfaces, you would need to explicitly allow access between the subnet.
10-16-2012 08:46 PM
You can configure it the same way as any of your other physical interfaces.
In the configuration, just reference the name of that particular sub interface
10-16-2012 10:06 PM
Am I adding a static route in Device Setup > Routing > Static Routes? Or am I creating ACLs between the two interfaces?
10-16-2012 10:10 PM
NAT exemption between the interfaces.
Let me know the security level and name of each interface, and I'll help you configure it. ALso what version of ASA are you running?
Plus, "show run access-group" output would help too.
10-16-2012 10:23 PM
ASA version is 8.2(3)
Interface: GigabitEthernet0/1.338
Network: 172.30.0.81/28
Security Level: 50
Name: primero
GigabitEthernet0/1.345
Network: 172.30.0.129/29
Security level: 50
Name: SilverWheaton
10-16-2012 10:29 PM
here we go:
static (primero,SilverWheaton) 172.30.0.80 172.30.0.80 netmask 255.255.255.240
Then just a "clear xlate" if you have no ACL applied to both interfaces.
Otherwise, if you have ACL applied to the interfaces, you would need to explicitly allow access between the subnet.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide