VLAN/Subnet setup on ASA 5505

Hello All,

I have a ASA 5505 that has been working great for a few years with 2 VLANs configured. One for the outside (216.64.x.x) and one for the inside (192.168.0.1). We recently installed IP Office and will soon connect our remote office to our main office. I need to setup another VLAN/Subnet which will be 192.168.1.x  to support out remote office. Although I am not new to networking, I don't typically work on firewalls/switches all the time - once I setup mine up with the help from people on this site - it pretty much runs itself.

How do I add another VLAN/Subnet (192.168.1.x) to my basic ASA 5505. I don't have the security plus license, can this still be done? I attempted to do this last night, but I don't think it's correct - see running config below:

Thx


Result of the command: "show running-config"

: Saved
:
ASA Version 7.2(2)
!
hostname ciscoasa
domain-name audiology.org
enable password xxxxxxxxxxxxxxxx encrypted
names
!
interface Vlan1
 nameif inside
 security-level 100
 ip address 192.168.0.1 255.255.255.0
 ospf cost 10
!
interface Vlan2
 nameif outside
 security-level 0
 ip address 216.64.x.2 255.255.255.240
 ospf cost 10
!
interface Vlan12
 no nameif
 no security-level
 ip address 192.168.1.1 255.255.255.0
!
interface Ethernet0/0
 switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
passwd 2KFQnbNIdI.2KYOU encrypted
ftp mode passive
clock timezone EST -5
clock summer-time EDT recurring
dns server-group DefaultDNS
 domain-name audiology.org
same-security-traffic permit inter-interface
access-list mailserver extended permit tcp any host 216.64.x.10 eq smtp
access-list mailserver extended permit tcp any host 216.64.x.4 eq https log
access-list mailserver extended permit tcp any host 216.64.x.4 eq www
access-list outside_in extended permit tcp any host 216.64.x.4 eq https
access-list outside_in extended permit tcp any host 216.64.x.4 eq www
access-list outside_in extended permit tcp any host 216.64.x.3 eq www
access-list outside_access_in remark RDP for Bkana
access-list outside_access_in extended permit tcp any host 216.64.x.12 eq 3389
access-list outside_access_in remark AAADC2
access-list outside_access_in extended permit tcp any host 216.64.x.10 eq smtp
access-list outside_access_in extended permit tcp any host 216.64.x.4 eq ftp
access-list outside_access_in remark Web Portal/AAAMBR02
access-list outside_access_in extended permit tcp any host 216.64.x.4 eq www
access-list outside_access_in remark Web Portal/AAAMBR02
access-list outside_access_in extended permit tcp any host 216.64.x.4 eq https
access-list outside_access_in extended permit tcp any host 216.64.x.10 eq https
access-list outside_access_in remark RDP for CRM
access-list outside_access_in extended permit tcp any host 216.64.x.8 eq 3389
access-list outside_access_in extended permit tcp any host 216.64.x.10 eq www
access-list outside_access_in remark HTTP access for CRM
access-list outside_access_in extended permit tcp any host 216.64.x.8 eq www
access-list outside_access_in extended permit tcp any host 216.64.x.5 eq https
access-list outside_access_in extended permit tcp any host 216.64.x.5 eq www
access-list outside_access_in extended permit tcp any host 216.64.x.9 eq www
access-list outside_access_in extended permit tcp any host 216.64.x.9 eq https
access-list outside_access_in extended permit tcp any host 216.64.x.9 eq 46168
access-list outside_access_in remark RDP for WebPortal Svr
access-list outside_access_in extended permit tcp any host 216.64.x.x eq 3389
access-list inside_nat0_outbound extended permit ip any 192.168.0.160 255.255.255.240
access-list outside_access extended permit tcp any host 216.64.x.6 eq 3389
access-list AAA_split_tunnel_ACL extended permit ip 192.168.0.0 255.255.255.0 any
pager lines 24
logging enable
logging trap debugging
logging asdm informational
logging queue 150
mtu inside 1500
mtu outside 1500
ip local pool vpnpool 192.168.50.1-192.168.50.254 mask 255.255.255.0
ip local pool AAAIPPOOL 192.168.0.161-192.168.0.180 mask 255.255.255.0
ip verify reverse-path interface outside
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-522.bin
no asdm history enable
arp timeout 14400
global (outside) 1 216.64.x.3-216.64.78.12 netmask 255.255.255.240
global (outside) 1 interface
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 0.0.0.0 0.0.0.0
static (inside,outside) 216.64.x.4 192.168.0.4 netmask 255.255.255.255
static (inside,outside) 216.64x.12 192.168.0.212 netmask 255.255.255.255
static (inside,outside) 216.64.x.8 192.168.0.12 netmask 255.255.255.255
static (inside,outside) 216.64x.10 192.168.0.62 netmask 255.255.255.255
static (inside,outside) 216.64.x5 192.168.0.66 netmask 255.255.255.255
static (inside,outside) 216.64.x.9 192.168.0.8 netmask 255.255.255.255
static (inside,outside) 216.64.x.3 192.168.0.37 netmask 255.255.255.255
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 216.64.78.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
aaa-server NTWRKSVRS protocol ldap
aaa-server NTWRKSVRS host 192.168.0.62
 timeout 5
 ldap-scope onelevel
group-policy Audiology_VPN internal
group-policy Audiology_VPN attributes
 banner value Welcome to the Audiology Network.
 dns-server value 192.168.0.8 192.168.0.62
 vpn-tunnel-protocol IPSec
 split-tunnel-policy tunnelspecified
 split-tunnel-network-list value AAA_split_tunnel_ACL
 default-domain value audiology
group-policy vpnpolicy internal
group-policy vpnpolicy attributes
 banner value You are entering a secured network for authorized personal only.
 dns-server value 192.168.0.8 192.168.0.62
 vpn-tunnel-protocol IPSec l2tp-ipsec
 default-domain value audiology
username sbishop password Eeg.fmr26DELXEKw encrypted privilege 5
username sbishop attributes
 vpn-group-policy Audiology_VPN
username lowens password ZikxJcEBZ0YqVONZ encrypted privilege 5
username lowens attributes
 vpn-group-policy Audiology_VPN
username cgallow password cxuXh2CnVa2e5tEm encrypted privilege 5
username cgallow attributes
 vpn-group-policy Audiology_VPN
username equinn password Lctoi4gVDnZoklWY encrypted privilege 5
username equinn attributes
 vpn-group-policy Audiology_VPN
username cfurr password RKlWPtus9hqzax8A encrypted privilege 5
username cfurr attributes
 vpn-group-policy Audiology_VPN
username bwertheim password v/.qI7/EEH1aAXjD encrypted privilege 5
username bwertheim attributes
 vpn-group-policy Audiology_VPN
username vanessas password 7IE6D1eIfx0KcZHE encrypted privilege 5
username vanessas attributes
 vpn-group-policy Audiology_VPN
username meggano password TB2g6ELNob5JQpTe encrypted privilege 5
username meggano attributes
 vpn-group-policy Audiology_VPN
username skelley password fLQvCBmxMLbGw02J encrypted privilege 5
username skelley attributes
 vpn-group-policy Audiology_VPN
username bkana password 7nGPp4eh4G.KZH7p encrypted privilege 15
username bkana attributes
 vpn-group-policy Audiology_VPN
username wkana password dDw7XyPkGrrKlkzN encrypted privilege 15
username wkana attributes
 vpn-group-policy vpnpolicy
username jwilson password yhQDuki0An31.NuN encrypted privilege 5
username jwilson attributes
 vpn-group-policy Audiology_VPN
aaa authorization command LOCAL
http server enable
http 192.168.0.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto dynamic-map outside_dyn_map 20 set pfs
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
 authentication pre-share
 encryption 3des
 hash sha
 group 2
 lifetime 86400
crypto isakmp nat-traversal  20
tunnel-group Audiology_VPN type ipsec-ra
tunnel-group Audiology_VPN general-attributes
 address-pool AAAIPPOOL
 default-group-policy Audiology_VPN
tunnel-group Audiology_VPN ipsec-attributes
 pre-shared-key *
tunnel-group vpntunnel type ipsec-ra
tunnel-group vpntunnel general-attributes
 address-pool vpnpool
 default-group-policy vpnpolicy
tunnel-group vpntunnel ipsec-attributes
 pre-shared-key *
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
!
dhcpd address 192.168.0.2-192.168.0.129 inside
!

!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect rtsp
  inspect esmtp
  inspect sqlnet
  inspect skinny
  inspect sunrpc
  inspect xdmcp
  inspect sip
  inspect netbios
  inspect tftp
  inspect icmp
!
service-policy global_policy global
client-update enable
privilege cmd level 3 mode exec command perfmon
privilege cmd level 3 mode exec command ping
privilege cmd level 3 mode exec command who
privilege cmd level 3 mode exec command logging
privilege cmd level 3 mode exec command failover
privilege show level 5 mode exec command running-config
privilege show level 3 mode exec command reload
privilege show level 3 mode exec command mode
privilege show level 3 mode exec command firewall
privilege show level 3 mode exec command interface
privilege show level 3 mode exec command clock
privilege show level 3 mode exec command dns-hosts
privilege show level 3 mode exec command access-list
privilege show level 3 mode exec command logging
privilege show level 3 mode exec command ip
privilege show level 3 mode exec command failover
privilege show level 3 mode exec command asdm
privilege show level 3 mode exec command arp
privilege show level 3 mode exec command route
privilege show level 3 mode exec command ospf
privilege show level 3 mode exec command aaa-server
privilege show level 3 mode exec command aaa
privilege show level 3 mode exec command crypto
privilege show level 3 mode exec command vpn-sessiondb
privilege show level 3 mode exec command ssh
privilege show level 3 mode exec command dhcpd
privilege show level 3 mode exec command vpn
privilege show level 3 mode exec command blocks
privilege show level 3 mode exec command uauth
privilege show level 3 mode configure command interface
privilege show level 3 mode configure command clock
privilege show level 3 mode configure command access-list
privilege show level 3 mode configure command logging
privilege show level 3 mode configure command ip
privilege show level 3 mode configure command failover
privilege show level 5 mode configure command asdm
privilege show level 3 mode configure command arp
privilege show level 3 mode configure command route
privilege show level 3 mode configure command aaa-server
privilege show level 3 mode configure command aaa
privilege show level 3 mode configure command crypto
privilege show level 3 mode configure command ssh
privilege show level 3 mode configure command dhcpd
privilege show level 5 mode configure command privilege
privilege clear level 3 mode exec command dns-hosts
privilege clear level 3 mode exec command logging
privilege clear level 3 mode exec command arp
privilege clear level 3 mode exec command aaa-server
privilege clear level 3 mode exec command crypto
privilege cmd level 3 mode configure command failover
privilege clear level 3 mode configure command logging
privilege clear level 3 mode configure command arp
privilege clear level 3 mode configure command crypto
privilege clear level 3 mode configure command aaa-server
prompt hostname context
Cryptochecksum:5d1d3f632b1fd0b18f66ad565f0178e8
: end
Start Free Trial