Hello everyone!
Currently we have 2 ISPs. Each ISP connected to 5510 ASA. Each 5510 has 20 ipsec tunnels terminated on. Both ASAs plugged into internal Layer 3 HP switch wich acts as our internal router.
We have 3 VLANS. 2 of the vlans are defined within the layer 3 hp switch (ex: 10.10.10.0 "server network, 10.10.20.0 "desktop network") and the last vlan (10.200.120.0) is defined on one of the ASA itself.
HP switches are also vlan'ed in half. upper ports all plug into the "server network" and lower ports plug into the ASA vlan. All other switches plug into the "desktop network".
I am redesigning our corporate network. I just purchased 34 cisco 2960s switches along with two 3850 layer 3 (stacked) to act as internal router to replace all of our HP switches.
So the 3850 will be attached to two 5510 (public facing) ASAs. Remove the vlan off of the ASA and define everything within the 3850. Basically keep things similar with the exception of replacing all layer 2 and layer 3 devices with cisco gear.
Please see my crude handmade diagrams below. The current is what we have and the desired is what i want. Shouldn’t be too difficult right?
I think i would need inter-vlan routing enabled and configured on 3850. How do i pass noc vlan traffic to one isp and server/desktop traffic to the other isp?
thanks.
