cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

233
Views
0
Helpful
5
Replies
Highlighted
Beginner

Routing question in ASA 5500!

Hello!

I have a question about routing function in ASA 5500. scenario: The asa (inside int 192.168.1.1) acts default gateway for all inside nodes. We have also another network on the inside (192.168.2.0), can the asa route traffic to this net via only the inside interface (192.168.1.1) i know that the pix dose NOT support this routing scenario, will the asa do it??

Regards /Jonny

5 REPLIES 5
Highlighted
Rising star

Re: Routing question in ASA 5500!

you may give the command "same-security-traffic permit intra-interface" a go.

however, according to the command reference, it supports ipsec packets only: "Permits communication in and out of the same interface when traffic is IPSec protected."

http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a00804527dc.html#wp1002608

Highlighted
Beginner

Re: Routing question in ASA 5500!

No that didn't work

Highlighted
Engager

Re: Routing question in ASA 5500!

Not sure if this will work for IP traffic !!! you can either create a seperate vlan on the PIX for this and route between interfaces or use some other layer 3 device to redirect the traffic... as Jacko said, this might work well for IPSEC traffic....

hope this helps...

Raj

Highlighted
Rising star

Re: Routing question in ASA 5500!

i did test the command "same-security-traffic permit intra-interface" and it will not work with any traffic other than crypto traffic.

Highlighted
Beginner

Re: Routing question in ASA 5500!

Jonny,

We have done this by using sub-interfaces, but assuming you have only the 192.168.1.x network connected to the ASA, you can add a static route to point 192.168 2.x packets to the router connecting the two interfaces.

Cheers

Tim