asked on

Basic Configuration of Cisco Catalyst 3750 and ASA 5505

Hi - I have remote office which has an active line and I have been to test the line - I have been asked to take a Cisco Catalyst 3750 and ASA 5505 and a Laptop. My knowledge of Cisco is not very advanced. Can anyone tell me what do I have to do to get this going.

Regards
Adam

bsohn417

What kind of lines?
please input more details

adam_kan2000

ASKER

2MB internet line from the isp dsl i think

bsohn417

Is it ethernet handoff?
So you attach the Ethernet HANDOFF to ASA5505 (UNTRUST)
(TRUST will connect you SW) (ex: VLAN 10). U will will create DHCP on either SW or ASA and give default route for traffic pointing to DSL ip. you should be set.

adam_kan2000

ASKER

WHAT ABT THE CONFIG ON THE 3750

bsohn417

this si very basic config
no DHSP on the switch, you will need to configure DHCP on ASA

In this config, SW will listen to ASA over VLAN 10 and it will pass the info to you connected pc

service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname DC-VM-01
!
boot-start-marker
boot-end-marker
!
enable secret 5 cisco
!
no aaa new-model
system mtu routing 1500
vtp domain bristol
vtp mode transparent
ip subnet-zero
!
!

!
!
vlan internal allocation policy ascending
!
!
interface GigabitEthernet0/1
switch port acc vlan 10
des "Connection to cisco ASA 5505"
no shut
!
interface GigabitEthernet0/2
switch port acc vlan 10
des "MYPC"
no shut
!
interface range GigabitEthernet0/3 - 48
shut
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address x.x.x.x x.x.x.x
!
!
ip classless
no ip http server
!
!
control-plane
!
!
line con 0
password cisco
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!

end

adam_kan2000

ASKER

I will be attaching a server to the switch will be the DHCP SERVER

bsohn417

Thats fine
you will need to issue " IP DHCP SMART-relay" command for switch to pass the info.

All you have to do is create different VLAN
Cisco 3750 supports routing so issue "IP routing" command

So you will have vlan 10 (Firewall connection)
VLAN 20 (PC connection)
Make sure that pc port now access vlan 20

This should resove your issue.

int vlan 20
ip address 10.10.20.1 255.255.255.0
ip helper-address x.x.x.x (Serevr IP address)
no shut

adam_kan2000

ASKER

Thanks for the answer
Do you do any Freelance work as well.

Thx

bsohn417

Yea
darsj21@gmail.com

adam_kan2000

ASKER

thx

adam_kan2000

ASKER

did u check ur email

ASKER CERTIFIED SOLUTION