where should i apply my subinterface for each vlan

[tyr668]

 

should i apply my subinterface for each vlan on the firewall G1/3 or the right router (SG) ? really confuse how i should allow each vlan to access the web user located at the top (200.1.1.0/24 subnet)

[Richard Burts]

The answer about where to put the subinterfaces depends on where the inter vlan routing is being done. Your diagram is not clear about that. I am guessing that the link from firewall to router is a routed link and that inter vlan routing is done on the firewall. Is that correct? If so then the subinterfaces would go on the firewall.

[tyr668]

this is my designed network. not sure whether it's correctly designed, i need to have vlans and all vlans must be able to route outside and ping to the other vlans. if so how should i design this ?

[paul driver]

Hello
If the Fw is performing the L3 intervlan routing then gig1/3 should have subinterfaces to relect the L3 subnets for the LAN and fa0/5 on the interconnecting switch will become a trunk.

[tyr668]

hi paul , i can't seem to create sub interface on cisco packet tracer of 5506x asa. let's say if i just need each vlan to ping each other and be able to route outside the router. how should i design it like ?