Cisco 888 trunk ports

[extremal.v]

Hello everyone!

Need a help with cisco ASA 5505 and cisco c888 connection. C888 is used as a switch with trunk configuration on the ports. Cisco ASA 5505 is configured with the trunk port too. When connecting them together the link is up but no mac addresses on the ASA port and C888 doesn replay on ICMP requests.

But the same configuration worked fine with the c2960 instead of cisco ASA.

What can I miss?

The configuration of the ports is simple on the both sides, switchport mode trunk.

I wonder why it does work with switch but doesn't with ASA.

[marce1000]

                 - What are  ISMP requests ?

 M.

[Richard Burts]

We have a description of some symptoms but very little detail to work with. A good starting point would be to post the config of the ASA (or if you do not want to post the complete config then post the interface config) and the config of the 888.

[extremal.v]

There is a port configuration of ASA and C888.

Cisco ASA 5505:

interface ethernet 0/0
switchport mode trunk
switchport trunk allowed vlan 100,200,300

interface vlan 100
nameif mgmt
security-level 100
ip address 10.10.10.1 255.255.255.240

Cisco c888:

interface f0
switchport mode trunk
no ip address

interface vlan 100
description mgmt
ip address 10.10.10.2 255.255.255.240

ip route 0.0.0.0 0.0.0.0 10.10.10.1

Cisco C888 allowes me to input command switchport trunk allowed vlan 100, but it doesn't show it in configuration.

If I connect the same f0 port of C888 to the port of c2960 with configuration:

interface fastethernet 0/1
switchport mode trunk
switchport trunk allowed vlan 100

Everything works just fine.

[Richard Burts]

Does this 5505 have the Base license or the Security Plus license? According to Cisco documentation "Trunk mode is available only with the Security Plus license." See this link for additional detail 

https://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/int5505.html?dtid=osscdc000283#wp1057200

If you are running the Security Plus license then here are some things to try.

Can you post the configuration of all of the 5505 interfaces?

What happens if you move the trunk configuration from Ether0/0 to some other interface (perhaps Ether 0/1 or Ether 0/2)?

[extremal.v]

And you got me! ICMP of course.