IP subnet migration

I am in the middle of migrating from an old domain to a new one. At the same time I am implementing 3 new IP subnets for the new domain, while needing to keep the old subnet alive for a while.  My current architechure is:  ASA5510 firewall - which is the gateway for my old subnet -192.0.0.0/24. No router currently in place and 3 48port layer 2 switches - cisco/linksys variety, New subents's: 10.10.1.0/24, 10.10.3.0/24, 10.10.5.0/24  My ASA cannot handle secondary IP address for the other gateways and I only have the 1 physical port that my old network uses for the LAN gateway.  Should I purchase a router and place it in between my switch gear and firewall to act as the gateway for all the new and old subnets?  I need the new and old subnets to be able to talk between them. Any ideas?
ritch578Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Rick_O_ShayCommented:
If your current firewall/router can't support VLAN tagging and sub-interfaces then you would need to get a router to put in between it and the switches.
You might consider a layer 3 switch to do the routing. Just bring it into the existing network as one of its subnets and have a default route on it pointing to the ASA.
0
zwart072Commented:
You have to create 4 subinterface on the 1 physical interface on the asa. Then the uplink from the asa to you switch you have to configure as trunk port as well as the uplinks to the other switches. Now you can assign a specific vlan to each subinterface and add the ip adress which can act as default gateway for that specific vlan.

0
ritch578Author Commented:
I am a networking novice at best and a pure rookie when it comes to VLans.  Does creating a Vlan require each and every user network drop for example to be known on the switch? And can traffic between the VLan's talk freely - example - 10.10.1.1 (server network) will serve up DHCP address to clients (10.10.3.1 client network)  The only reason I ask is being a novice and not wanting to over complicate the enviroment.
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

zwart072Commented:
you have to assign each switch port to the vlan which it should be. Then you've create a policy in the asa to permit traffic between those vlan's. You will also need probably nat or pat to translate your internal private ip range to a public ip(range) to the outside. In the security policy on the asa you have to permit the traffic you need to the inernet but also between the vlan's
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ritch578Author Commented:
Thanks for the VLan education.  Would a router or add additional ports on the ASA be an easier solution?
0
zwart072Commented:
adding a router would be an easier en better solution, because this is what a router should do. An asa is a firewall and not a router, but with the asa you can do the job you require.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Hardware Firewalls

From novice to tech pro — start learning today.