Hi,
We have the below network in one of our factories.
Atttached is the visio for it.
Servers 192.168.2.11, 2.15 & 2.21 from third business unit need to access our factory network servers in vlan 101( 192.168.101.1/24).
The factory network has an ASA , a nexus 5k.
Our Cisco ASA is used to terminate the link between our factory & the other business unit. It is actually not that far away , hence fiber is used across both for interconnect using LACP.
The ip addressing is shown in the diagram.
Current State:-
From ASA , we can ping 192.168.62.1 & any of the servers like 192.168.2.11.
From their side, they can reach 192.168.62.2 and any of our servers like 192.168.101.45
However, when we tried to ping the servers 192.168.2.X from our nexus 5k core, they are not pingable.
These are the configuration on the ASA. we have an dual link running between ASA to N5k as portchannel.
ASA :->
interface GigabitEthernet0/6
speed 1000
duplex full
channel-group 1 mode on
no nameif
no security-level
no ip address
!
interface GigabitEthernet0/7
speed 1000
duplex full
channel-group 1 mode on
no nameif
no security-level
no ip address
interface Port-channel1
no nameif
no security-level
no ip address
interface Port-channel1.200
vlan 200
nameif LOCAL
security-level 100
ip address 10.10.1.1 255.255.255.248
interface Port-channel18
description Uplink to Business unit
nameif BU
security-level 0
ip address 192.168.62.1 255.255.255.0
access-list BU_access_in extended permit ip 192.168.2.0 255.255.255.0 192.168.101.0 255.255.255.0
access-group BU_access_in in interface BU
route BU 0.0.0.0 0.0.0.0 192.168.62.1
route LOCAL 192.168.101.0 255.255.255.0 10.10.1.2
On the N5K core :->
ip route 0.0.0.0 0.0.0.0 10.10.1.1
interface port-channel1
switchport mode trunk
speed 1000
duplex full
interface Ethernet1/21
switchport mode trunk
speed 1000
duplex full
channel-group 1
interface Ethernet1/22
switchport mode trunk
speed 1000
duplex full
channel-group 1
Please help what could be wrong here. Appreciate all advise on this.
