Because I'm limited to the number of ports I can use on the ASA.. I would like to have VLAN1 and VLAN3 ports available on the 2960.. VLAN1 ports would be native to the switch and I would just have to segment any number of ports to VLAN3 right? I was wondering how I would get two seperate VLAN's down to the 2960 when it's coming from multiple ports on the ASA.. Does this make sense.. It's kinda funky because the ports on the ASA are switch ports.. So, say FastEthernet0/3 is VLAN1 on ASA and I use X-over to FastEthernet 0/21 on 2960 and allocate FastEthernet0/1-0/10 & FastEthernet0/21 to VLAN1. I then take a X-over cable from FastEthernet0/4 (ASA) to FastEthernet0/22 on 2960 and allocate all remaining ports to VLAN3..
Does this make any sense at all, or am I completely confused?
Main Topics
Browse All Topics
by: batry_boyPosted on 2007-03-20 at 20:29:04ID: 18761502
You should be able to achieve most of that, but I have a question...what do you mean by "I want to have VLAN1 & VLAN3 split on the 2960"?
I will address your other questions in order:
"Can I assign each POE port to its own VLAN?"...yes
"I would like to assign FastEthernet0/6 to VLAN3 and FastEthernet0/7 to VLAN1. I would then connect a Cisco 1130AG WAP to eachPOE port. Is this possible?"...yes
"I would then like to get DYNdns set up so I could create a L2L VPN Tunnel between VLAN3 and the corporate office. We run ASA 5520’s at Corporate so compatibility isn’t an issue. The biggest issue here is my limitations set forth by Mediacom not offering me a Static IP Address. Right?"
...yes, but not an insurmountable issue with the new 7.x code on the ASA. It now includes support for Dynamic DNS...see the following URL for the command syntax:
http://www.cisco.com/en/US
"I would like to put them out in a DMZ with full access to the Internet, but I’m not sure if this will work on the ASA appliance."
...if you only have a single public IP address, then you will have to use NAT of some sort for your gaming devices to pass traffic to/from the Internet. Do you mean that they don't do well with PAT or port forwarding? The point being that whether you put your gaming devices in a "DMZ" or on another VLAN (inside, personal, whatever you want to call the network segment), you can configure the ASA to allow unrestricted bidirectional traffic flow to those devices, but they will still be subject to NAT if you only have a single public IP from your ISP.
Please let me know if I need to clarify further or explain about the VLAN's...