cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
183
Views
0
Helpful
3
Replies
Beginner

ASA 5505

Happy Easter Everyone,

 

I want to connect one of my interfaces to a layer 3 switch that has multiple networks.  The switch is configured with Inter-Vlan Routing.  Will I be able to route multiple networks on the one interface or does it just like 1 range of IP on the ASA interface.  The ASA5505 that I have won't work with Router on a stick as it doesn't let me create sub interfaces...I do have a license for 8 different vlans.  

 

Thanks in Advance.

 

 

 

3 REPLIES 3
VIP Advisor

Re: ASA 5505

Yes, you can just add static routes for the subnets beind the switch via the switch.

Highlighted

Re: ASA 5505

Have you thought using your ASA 5505 as transparent mode in your design?  Transparent mode turns the ASA to a layer 2 device or a bridge.  This enables you to put the ASA between your router and layer 3 switch.  See link on how: https://community.cisco.com/t5/security-documents/asa-5505-8-4-transparent-mode-configuration-example/ta-p/3130678

Hall of Fame Master

Re: ASA 5505

The original post asks what seems to be a fairly simple question: "I want to connect one of my interfaces to a layer 3 switch that has multiple networks". And @Philip D'Ath provides a pretty simple answer that yes that can be done and static routes for the various subnets connected on the switch will provide connectivity. Given the additional statement in the original post that inter vlan routing is enabled on the switch I believe that the answer would work. It uses a single ASA interface, with an ASA SVI for the vlan on that interface to connect to an access port on the switch. The subnet configured for this connection provides transit connectivity between switch and ASA. The switch would route between its vlans and would route traffic for outside to the ASA. And the ASA would forward responses from outside to the switch.

 

But I suspect that the original poster was really trying to ask a different question. Especially the part where he mentions router on a stick and not being able to configure sub interfaces makes me thing that the original poster is thinking of connecting the switch port as a trunk rather than as an access port. That is possible. See information in this link for details of how to configure it.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/int5505.html#wp1057200

 

So connecting the switch to the ASA as a trunk can be done. But I would question why the original poster wants to do this? If it were a layer 2 switch then it would make good sense to connect a trunk to the ASA and use the ASA for inter vlan routing. But this switch is layer 3 and is doing inter vlan routing. So what is the reason to want to connect each vlan directly to the ASA?

 

HTH

 

Rick

 

 

 

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards