hi all
i have 2960 l2 switch connected to the ASA 5505. for some or the other reason i am not able to do intervlan communication.
have done trunk mode on both ends onthe switch as well as on the ASA and native vlan 1 allowed. the trunk is up up i am able to poing only the vlan 1 ip from the switch to the ASA for the vlan 2 i am not and simillar for vlan 3.please help me in fixin this
config on the ASA
ASA Version 8.2(1)
!
hostname ciscoasa
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan1
description Inside Lan UK
nameif inside
security-level 100
ip address 192.168.50.5 255.255.255.0
!
interface Vlan2
description Internet
nameif outside
security-level 0
ip address 192.168.51.1 255.255.255.248
!
interface Vlan3
no nameif
security-level 100
ip address 192.168.52.254 255.255.255.0
!
interface Ethernet0/0
switchport access vlan 2
!
interface Ethernet0/1
switchport trunk allowed vlan 1-3
switchport trunk native vlan 1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
ftp mode passive
access-list acl_in extended permit icmp any any
pager lines 24
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
route inside 0.0.0.0 0.0.0.0 192.168.50.5 1
route inside 192.168.0.0 255.255.0.0 192.168.50.5 1
route inside 192.168.52.0 255.255.255.0 192.168.50.5 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet 0.0.0.0 0.0.0.0 inside
telnet timeout 5
ssh 192.168.50.5 255.255.255.255 inside
ssh 192.168.51.1 255.255.255.255 outside
ssh timeout 60
ssh version 2
console timeout 0
dhcpd auto_config outside
!
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
!
!
prompt hostname context
Cryptochecksum:862ed74b43dd84b4825fda278227c8ae
: end
ciscoasa#
ciscoasa# ping 192.168.50.10
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.50.10, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms
ciscoasa#
================================
and on my switch i have created four vlan i am just trying to communciating with atleast two vlans
!
interface Vlan1
ip address 192.168.50.10 255.255.255.0
no ip route-cache
!
interface Vlan2
description Server EXS4
ip address 192.168.52.1 255.255.255.0
no ip route-cache
!
--More-- interface Vlan4
description Storage ISCI
ip address 192.168.54.1 255.255.255.0
no ip route-cache
!
interface Vlan6
description Desktop Users
ip address 192.168.56.1 255.255.255.0
no ip route-cache
!
pleaselet me know the necessary steps that i have to do to make the communication work. between the switch and the ASA
thanks
