hi
i want to configure asa ,mode multiple context and i wanna create 2 vertuel firwalls one for client A and the other for client B
shéme : internet____212.217.2.0_______router_.1____212.217.1.0________.2_asa1----dmz(10.10.10.0),netwwork(192.168.10.0)
| .3_asa2----dmz(20.20.20.0),network(192.168.20.0)
i've tried but sadly it doesn't work :'( can you tell me please what seems to be the problem?
and an other question :$ i want to know how to install ASDM and how to configure it on my asa
my config est :
mode multiple
int g 0/0.1
vlan 10
no shut
exit
int g 0/0.2
vlan 20
no shut
exit
int g 0/1.1
vlan 100
no shut
exit
int g 0/1.2
vlan 200
no shut
exit
int g 0/1.3
vlan 300
no shut
exit
int g 0/1.4
vlan 100
no shut
exit
context asa1
description context pour clientA
allocate-int g0/0.1 outsidecontext
allocate-int g0/1.1 insidecontext
allocate-int g0/1.3 dmz
context asa2
description context pour clientB
allocate-int g0/0.2 outsidecontext
allocate-int g0/1.2 insidecontext
allocate-int g0/1.4 dmz
route outside 0 0 212.217.1
########client A
int g0/0.1
nameif outside
sec 0
ip add 212.217.1.2 255.255.255.0
no shut
int g0/1.1
nameif intside
sec 100
ip add 192.168.10.1 255.255.255.0
no shut
int g0/0.1
nameif dmz
sec 50
ip add 10.10.10.1 255.255.255.0
no shut
nat (inside) 1 192.168.10.0 255.255.255.0
nat (dmz) 1 10.10.10.0 255.255.255.0
global(outside) 1 212.217.1.10-212.217.1.100 net 255.255.255.0
global(dmz) 10.10.10.10-10.10.10.40 net 255.255.255.0
access-list inbound permit icmp any any echo
access-list inbound permit icmp any any echo-replay
access-list dmz permit tcp any host 10.10.10.50 eq 80
access-group inbound in interface outside
access-group dmz in interface dmz
########client B
int g0/0.2
nameif outside
sec 0
ip add 212.217.1.3 255.255.255.0
no shut
int g0/1.2
nameif intside
sec 100
ip add 192.168.20.1 255.255.255.0
no shut
int g0/1.4
nameif dmz
sec 50
ip add 20.20.20.1 255.255.255.0
no shut
nat (inside) 1 192.168.20.0 255.255.255.0
nat (dmz) 1 20.20.20.0 255.255.255.0
global(outside) 1 212.217.1.110-212.217.1.1200 net 255.255.255.0
global(dmz) 20.20.20.10-20.20.20.40 net 255.255.255.0
access-list inbound permit icmp any any echo
access-list inbound permit icmp any any echo-replay
access-list dmz permit tcp any host 20.20.20.50 eq 80
access-group inbound in interface outside
access-group dmz in interface dmz
route outside 0 0 212.217.1