asked on

Juniper Core L3 switch with multiple VLAN's, gateway to ASA 5505

I am having trouble getting a Juniper L3 EX2200 to pass all traffic to a Cisco ASA 5505 that is my gateway. I have 5 VLAN's terminating on the Juniper switch, whcih has the default gateway of the ASA.

The ASA has routes to each VLAN IP pointing to the Junipers IP, which is currently member of VLAN 100 (example). I changed both the ASA port and the Juniper uplink port to Access only port, and still can not get through to the internet from other VLAN's, other than the VLAN 100.

Any thoughts?

SOLUTION

Ernie Beek

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER CERTIFIED SOLUTION

deimark

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

munisee

ASKER

Ernie-- We actually want to have the Juniper switch do all the L3 routing. Not the 5505. If we used the 5505 we would cut speeds down to 100mbit. The Juniper is gig.

Deimark, Yeah, each VLAN does have it's own L3 interface, which is x.x.x.1, y.y.y.1, z.z.z.1, etc. Like I had mentioned to Ernie the reason we didn't want to use the ASA for VLAN routing is that we would lose our Gig backbone switching capacity.

Anyway, I am going to split this with you guys as I found the issue myself. When the core switch was configured for a default GW, the subnet mask was 24 bits... not 0. So this was our issue!!! LOL.

Thanks for your responses!

munisee

ASKER

Problem was resolved.

Ernie Beek

Good to hear you resolved it!

Thx for your points :)

deimark

As above, glad its now working :)