Access the answers to your technology questions today.
Subscribe Now
30-day free trial. Register in 60 seconds.
What Makes Experts Exchange Unique?
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
Subscribe Now
30-day free trial. Register in 60 seconds.
Join the Community
Give a Little. Get a Lot.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Join the Community
by: lrmoorePosted on 2009-02-18 at 05:29:54ID: 23669970
1 - yes, but... I would put a switch between them and run OSPF between the routers and the ASA
2 - yes, it is actually recommended that they be, but... both primary and secondary should be available online at the same time. With your backup config only one will be available at a time
3 - see above
>access-list dmz_int extended permit ip any 192.168.0.0 255.255.255.0
Then what is the purpose of having a DMZ if you are allowing all traffic between dmz and inside?
>access-list dmz_int extended permit tcp host 172.16.0.50 any eq domain
>access-list dmz_int extended permit tcp host 172.16.0.51 any eq domain
These should be: (udp vs tcp for dns)
access-list dmz_int extended permit udp host 172.16.0.50 eq domain any
access-list dmz_int extended permit udp host 172.16.0.51 eq domain any
access-list dmz_int extended permit udp host 172.16.0.50 any eq domain
access-list dmz_int extended permit udp host 172.16.0.51 any eq domain
access-list dmz_int extended permit tcp host 172.16.0.100 eq www any
access-list dmz_int extended permit tcp host 172.16.0.100 eq https any
access-list dmz_int extended permit tcp 172.16.0.0 255.255.255.0 any eq http
access-list dmz_int extended permit tcp 172.16.0.0 255.255.255.0 any eq https
>access-list inside_int extended permit ip any any
Do not assign this acl to the inside interface. Permit any any is the default from inside to outside or inside to dmz.