Hi,
I have one ongoing project. Since I had my CCNA course back in 2005 (since most of my IT carrier was programming and system engineering), I am having a dilemma of choosing a best approach. Current setup that I have is one ASA firewall / router, and two networks. First network is covered by HP switches and it represents administration network (VLAN 1 - 192.168.1.0). Second network is bit different. I is also using HP switches, but it has Meraki APs in it. Those Meraki has been setup to have two ssid / vlans. VLAN 10 represents guest wifi, and VLAN 1 needs to communicate with VLAN 1 on first network.
I have created two simple schemes but I don't know which of them are the best approach.
First one would include connecting two switches and all the traffic goes via admin network switch:
which brings the question, even if it is 1Gbit link, it should stress this device more than if there are two links that have direct connection to ASA...
please refer to the prinscreen below.
There is a second approach, that both network switches goes directly into ASA, but then I am not sure how the communication between VLAN1 from admin network will be able to communication with VLAN1 from guest wifi network...? Will ASA be able to forward packets by default (even though I doubt since it is not a switch...)
What would be the best approach?
If I choose first method than I need to create trunk between two switches and trunk to ASA. Speaking of that it will also split network traffic, since all the network traffic will be going from one link.
Second approach, you have two separated "connections" which would only stress ASA, but I don't know how ASA would behave? Would it see and let all the traffic from VLAN1 on admin network to VLAN1 on guest wifi network or...?
Thank you in advance
