I'm trying to a Cisco 1801 to provide a firewall for my public facing servers. I'm also trying to split the switchports into vlans, 4 ports for public servers, and 4 ports for natted devices on a local lan. The physical setup goes like this
fa0 -> speedtouch dsl modem
fa1 -> web server
fa2 -> mail server
fa3 -> vpn server
fa5-8 -> natted pc's on a local lan
I'm not using the atm interface for dsl, because my line is too unstable to support a cisco, the atm resets every 5 seconds or so. So i'm using a speedtouch dsl router to route the public ip's through to the cisco so that i can still utilise access lists etc.
I've configured fa0 with a public ip address, and this can get out to the internet no problem. When i configure a server with a public ip and plug it into vlan1 (fa1-4) it fails to even ping fa0.
Anybody got any thoughts on how to configure this and allow natted devices on vlan2 (fa5-8)?