• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1013
  • Last Modified:

Trunk Cisco Catalyst 2960 from another Catalyst and then to an ASA 5510

We will be routing all of our remote locations (directly connected via fiber) to our new corporate center and will be utilizing roughly 24 VLAN's.  The local ISP is providing a Cisco Catalyst (do not know the series off-hand) as a demarc point and will be setting up the actual VLAN's.

From their switch, we need to trunk it into our Catalyst 2960. I would like to know how to correctly set this up.

Then from our Catalyst 2960, we need to trunk to an ASA 5510 with the Security Plus package, which we will be using as a router-on-a-stick which we will use with different sub-interfaces and security contexts to route and provide security for each of the VLAN's.  If possible, it would be great to have some help here too.

I would simply like to compare against what I have planned, to see if I am missing any steps or if there is a better way of doing things; thanks.
0
Tercestisi
Asked:
Tercestisi
  • 2
1 Solution
 
fritz5150Commented:
On the port coming from the service provider's switch set it to the following values.

Example:
int FastEthernet 0/1
description "Trunk from Service Provider"
switchport mode trunk
switchport trunk encapsulation dot1q (most providers use 802.1q vlan trunking)
speed 10 (or 100 depending on what the providers switch will be hard coded to)
duplex full (this can be important)


int FastEthernet 0/24
description "Trunk to ASA Firewall)
switchport mode trunk
switchport trunk encapsulation dot1q
speed 100
duplex full
_____________________________________________

You will configure the ASA Outside interface in the same way to accept the trunk from the 2960
0
 
TercestisiAuthor Commented:
Thanks, that is what I have minus the duplex and speed specifications.

Can I set speed to 1000 if both interfaces are gigabit?

Is routing between the VLAN's then as simple as setting up ACL's?
0
 
fritz5150Commented:
You can only set the speed if the other side of the connection is set for 1000 Mbps also. The routing for the vlans will have to be done on your asa since you are passing them as a trunk into that unit.
You will have to setup SVI's (Switched virtual Interfaces) or Vlan interfaces to do your routing on the ASA unit.
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now