Trunk Cisco Catalyst 2960 from another Catalyst and then to an ASA 5510

We will be routing all of our remote locations (directly connected via fiber) to our new corporate center and will be utilizing roughly 24 VLAN's.  The local ISP is providing a Cisco Catalyst (do not know the series off-hand) as a demarc point and will be setting up the actual VLAN's.

From their switch, we need to trunk it into our Catalyst 2960. I would like to know how to correctly set this up.

Then from our Catalyst 2960, we need to trunk to an ASA 5510 with the Security Plus package, which we will be using as a router-on-a-stick which we will use with different sub-interfaces and security contexts to route and provide security for each of the VLAN's.  If possible, it would be great to have some help here too.

I would simply like to compare against what I have planned, to see if I am missing any steps or if there is a better way of doing things; thanks.
Who is Participating?
fritz5150Connect With a Mentor Commented:
On the port coming from the service provider's switch set it to the following values.

int FastEthernet 0/1
description "Trunk from Service Provider"
switchport mode trunk
switchport trunk encapsulation dot1q (most providers use 802.1q vlan trunking)
speed 10 (or 100 depending on what the providers switch will be hard coded to)
duplex full (this can be important)

int FastEthernet 0/24
description "Trunk to ASA Firewall)
switchport mode trunk
switchport trunk encapsulation dot1q
speed 100
duplex full

You will configure the ASA Outside interface in the same way to accept the trunk from the 2960
TercestisiAuthor Commented:
Thanks, that is what I have minus the duplex and speed specifications.

Can I set speed to 1000 if both interfaces are gigabit?

Is routing between the VLAN's then as simple as setting up ACL's?
You can only set the speed if the other side of the connection is set for 1000 Mbps also. The routing for the vlans will have to be done on your asa since you are passing them as a trunk into that unit.
You will have to setup SVI's (Switched virtual Interfaces) or Vlan interfaces to do your routing on the ASA unit.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.