Filter traffic between Vlans.

[Andre Luiz Souza Santos]

Hi,

I have a ASA 5585 and a Nexus 5596, and i need a sugestion to configure this cenário:

My users in the Vlan 10 need access on the network in the Vlan 20, but this traffic must be filtered for firewall. In the firewall a received a trunk port for Nexus 5596, and i created subinterfaces to receive the Vlans for this trunk.

The gateway for my users is the address for the ASA subinterfaces.

What i do to filter the traffic between the Vlans?

Regards

André Luiz

[blau grana]

Hello Andre,

You can use ACLs to filter traffic on ASA's subinterfaces or you can use Vlan ACLs to filter traffic on nexus.

Best Regards

Please rate all helpful posts and close solved questions

[Andre Luiz Souza Santos]

Hí,

Thank you for reply.

I´m a new user for ASA, and i have various doubts about this implementation. Do you suggest a literature for help me?

My ideia is use a IPS to filter traffic on ASA subinterfaces then route and then send to switch.

Regards

[blau grana]

Hello Andre,

I am also not very familiar with ASA. I understood from your first post that you want to filter traffic between VLANs based on IP addresses. This can be accomplished by creating ACLs on ASA's subinterfaces, no need for IPS.

If you want to deeper your knowledge in security area I would recommend to start here:

https://learningnetwork.cisco.com/community/certifications/security_ccna

http://www.ciscopress.com/markets/detail.asp?st=98139

https://learningnetwork.cisco.com/community/certifications/ccnpsecurity/

http://www.ciscopress.com/markets/detail.asp?st=44730

And definitely here:

https://supportforums.cisco.com/community/netpro/security

There you can find guys who are in this field for many years and have lot of knowledge, experinece and certainly would be glad to help you navigate to right direction.

Best Regards

Please rate all helpful posts and close solved questions