Solved

I need some help writing some route statements for a network we are building

Posted on 2007-11-29
9
264 Views
Last Modified: 2013-11-16
Hi everyone, We're putting together a new multisite network and I need some help with creating route statements on a few of our ASA routers.
Please take a look at the following visio document to see the locations and what IPs we are using on the ASA firewalls.
http://farm3.static.flickr.com/2341/2073805754_1a5c7a60ec_o.jpg

Note: The MPLS routers are controleld by the vendor, but they will create route statements on them for us if need be.
Note: the West Stree CoLo location is running two IP schemes on 1 physical cable segement. There are a few old IP phone that use this IP scheme and we don't want to use vlans or anything like that unless we have to. 10.20.0.0/16 and 192.168.128.0/24
Note: the ASA firewall in each location will be the default gateway for every device in that location.

Thanks everyone.
0
Comment
Question by:seanlabrie
  • 5
  • 4
9 Comments
 
LVL 8

Expert Comment

by:charan_jeetsingh
ID: 20374835
Looking at your diagram, routes needs to be added only at two location firewall :Waltham & Weststreet.

Waltham :
route inside 10.20.0.0 255.255.0.0 10.10.1.3
route inside 192.168.128.0 255.255.255.0 10.10.1.3

West street:
route inside 10.10.0.0 255.255.0.0 10.20.1.2

0
 
LVL 8

Expert Comment

by:charan_jeetsingh
ID: 20374857
I hope this works... Also if you have some L3 switch internally in your local network, then manage your routes from there rather than from ASA.
0
 
LVL 8

Expert Comment

by:charan_jeetsingh
ID: 20374865
also i am assuming that the name of interface on which all the lan networks are terminated is "inside"
0
 

Author Comment

by:seanlabrie
ID: 20375313
So i wont need to add route information to either of the MPLS routers? what about the 192.168.128.x network that is also running in the West Street Location?

thanks,
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:seanlabrie
ID: 20375320
Also without a route in the Marlborough office pointing to 10.20.x.x how will traffic get from marlborough to West Street?

Thanks again,
0
 

Author Comment

by:seanlabrie
ID: 20376099
You mentioned that I might want to have a L3 switch do the routing instead of the ASA? Is there a reason for that or is it a best practice?

thanks again,
0
 
LVL 8

Expert Comment

by:charan_jeetsingh
ID: 20380224

seanlabrie:
So i wont need to add route information to either of the MPLS routers? what about the 192.168.128.x network that is also running in the West Street Location?
> right, they already have the requierd information(Service provider must and shud have taken care of this, or u can recheck with them)... it is the firewall that needs to know as all traffic will hit it before te MPLS

seanlabrie:
Also without a route in the Marlborough office pointing to 10.20.x.x how will traffic get from marlborough to West Street?

You mentioned that I might want to have a L3 switch do the routing instead of the ASA? Is there a reason for that or is it a best practice?
>> Its a good practice. That takes un-necessary load off the f/w. Its basic purpose is to filter traffic.
>> I could see only one MPLS link... i am not sure if you having VPNs as well.... ??


0
 

Author Comment

by:seanlabrie
ID: 20381323
Two questions, If we only have firewalls, and not layer 3 switches, will the performance be lower because the firewalls are not as fast as the switches in routing traffic? or should things be pretty much the same, I'm looking to keep the cost of equipment as low as possible. also looking to keep things as simple as possible.

Second, Assuming that I have to tell the MPLS people what routes to add to their routers what should the routing table look like on all five routers? Marlborough has a persistent VPN to Waltham, and Marlborough will need access to west street.

sorry about asking so many questions, but I've never created a routing design before.

Thanks again.
0
 
LVL 8

Accepted Solution

by:
charan_jeetsingh earned 200 total points
ID: 20387198
Things will be pretty much the same. But if you plan to do lot of VPN stuff and traffic is too high on your internet.. definitely it will work gud... just see what is the size of your org at that loc. and regarding the cost... its always Cost vs. Performance & flexibility.

Regarding the routes on mpls routers.. i must say i missed ur VPN

now you require to add the following
ASA @ Marlborough.
>>in the VPN acl add the west street ip details in destination
ASA @ Waltham
>> in the VPN acl allow the traffic from west street subnet towards marlborough subnet
mpls routers @ west street..
>>add the route for marlborough ip subnet, with next hop as mpls router at waltham
mpls routers @ Waltham
>> Add route for marlborough ip subnet, with next hop as ASA @ waltham

That should make things work for u :)
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

We've been using the Cisco/Linksys RV042 for years as: - an internet Gateway - a site-to-site VPN device - a leased line site-to-site subnet-to-subnet interface (And, here I'm assuming that any RV0xx behaves the same way as an RV042.  So that's …
The Cisco RV042 router is a popular small network interfacing device that is often used as an internet gateway. Network administrators need to get at the management interface to make settings, change passwords, etc. This access is generally done usi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now