cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
518
Views
2
Helpful
4
Replies

Configuring an ASA with dual INSIDE connections

jlopez401
Level 1
Level 1

Hi, 

I'm trying to figure out how to configure my INSIDE connections for an ASA that has two interfaces going inside.  I'm using GNS3 and an Cisco ASAv 9.14.1.  So far I have have this:


hostname LA-ASA-5506

int G0/0
nameif inside
security-level 100
ip address 10.11.0.9 255.255.255.252
no shut

int G0/1
nameif inside1
security-level 100
ip address 10.11.0.13 255.255.255.252
no shut

int G0/2
nameif outside
security-level 0
ip address 1.1.11.3 255.255.255.248
no shut

route outside 0.0.0.0 0.0.0.0 1.1.11.1
route inside 10.11.0.0 255.255.0.0 10.11.0.13
route inside1 10.11.0.0 255.255.0.0 10.11.0.10

Am I on the right track?  This doesn't really seem right to me.  But I couldn't get the INTERFACE VLAN command to work or SWITCHPORT ACESS VLAN 1 to work either.

 

Screenshot 2023-03-19 181850.png

4 Replies 4


Hello
I cannot comment on why you have the design the way you do, at least one of that static are incorrect, what is you eventualy goal here, Are you wanting to aggregate those two connections?

route inside 10.11.0.0 255.255.0.0 10.11.0.13  < is this a typo?


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

Yes that was a typo.  My idea for an inside 1 didn't work because it was the same network.

route outside 0.0.0.0 0.0.0.0 1.1.11.1
route inside 10.11.0.0 255.255.0.0 10.11.0.14
!route inside1 10.11.0.0 255.255.0.0 10.11.0.10

 

 

Screenshot 2023-03-20 021545.png

Hello
You still haven’t explained what is it you wish to achieve with the topology you’ve posted?

I see a core switches with a a FHRP connecting to a single asa fw and a 1941 rtr?


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

I have the 2 core 3650s configured in HSRP.  I'm tasked with having all the VPN traffic to go out of the ASA device.  I one of the cores goes down, how do I configure the ASA so it picks up the traffic from the newly active router?

I initially thought a VLAN so all three connections could be on the same network.  But I can't seem to figure out how to set up VLANs on this ASA image.  It keeps saying the command isn't recognized.

 

Review Cisco Networking for a $25 gift card