Those are all very valid and helpful examples. Based on what you mentioned I feel the L3 Configuration would be best. Mainly because there is no Internet Access between vlans but simply access from one network to another internally so I do not think that I would need any sort of inspection. I assume the internet based on the vlan (as my vlan 12 and vlan 13 are set up) can not get Internet from each other vlan but their own network they initially connect to, or I hope. Another reason would be that 10.0.1.0 network would be streaming 60gig 4k video files so less amount of bottleneck the better.
Regardless of how I am keeping my Catalyst I do have 2 spare routers and 2 spare switches for mock networking and will configure using the Router-on-a-stick approach for the experience.
With that said it turns out that my initial problem of being able to ping but not access the NAS turned out to be that one Windows 10 PC. After hours of researching my Windows 10 had automatically disabled SMB2 access so I had to reactivate it and all worked as it should with my initial posting configuration.
Along with that, and I blame the idea of modifying a configuration opposed to starting fresh, I was NOT successful in implementing the router-on-a-stick configuration on the Catalyst and more specifically the ASA-5508-X as a lot of the commands were not the same as the examples I had looked up. So I reverted back to my configuration, which works, for now.
My question inquiry is this.
As we can see in my running-config I have GE 1-10 as a L2 vlan10 for 10.0.1.0 and GE 11 - 20 as a L2 vlan11 for 10.0.2.0. This are simply extra capacity access points for more physical devices on each subnet, nothing to do with each other.
I have GE21 as vlan12 configured with an IP address and GE22 as vlan13 configured with an IP address and both are independent from the vlan 10&11 as these are being used for the "communication". With this I still found myself unable to cross communicate even with 'ip routing' enabled. I have set no static routes. So what I did was create GE22 using default vlan1 with 192.168.1.5 which comes from the DHCP Server on the [inside] ASA-5508-X and on the ASA I made an ip route;
inside 10.0.1.0 255.255.255.0 192.168.1.5
inside 10.0.2.0 255.255.255.0 192.168.1.5
And now it all works.. With this in mind I also have static routes on the 10.0.1.0 and 10.0.2.0 Routers.
My question is should I be able to intercommunicate the vlans ON the Catalyst and not have the 2 ip routes on the ASA? And also what is the difference between the vlan 12 and vlan 13 with IP Addresses and GE 21/GE22 switcport mode access/switchport access vlan <#> versus NO vlan 12 and vlan 13 and just making the GE21/22 'no switchport' and configuring it with the same IP address as the vlans were?
I always wondered the difference between using a vlan with an ip vs just configuring the interface with an ip. I assume it is so that the 'vlan" configuration will be part of the other same vlans whereas the Interface IP is just an interface with an IP.
A lot of this is thinking out loud but also hoping to find answers as I also read through my books.
