Cisco ASA 5505 Multiple Internal Subnets
Posted on 2012-08-14
I have two offices, office A which is the main office that consists of Cisco ASA 5505, Cisco MPLS router, and Layer 2 switch, and office B which consists of MPLS router and Layer 2 switch. MPLS router and Layer 2 switch configured and managed by Telephone company. We have four VLAN's defined in the switch - VLAN 1 - 192.168.2.0, VLAN2, 192.168.3.0, VLAN3 - 192.168.4.0, and VLAN4 - 192.168.5.0. VLAN2 and VLAN4 are VoIP and work fine. VLAN1 and VLAN3 are data and are causing issues. All data must touch the ASA since we do not have layer 3 switches. I added the following commands to my ASA configuration:
Static (inside,inside) 192.168.0.0 192.168.0.0 netmask 255.255.0.0
route inside 192.168.3.0 255.255.255.0 192.168.2.11
route inside 192.168.4.0 255.255.255.0 192.168.2.11
route inside 192.168.5.0 255.255.255.0 192.168.2.11
192.168.2.11 is the MPLS router, not the ASA. When I do this I am able to ping across the data MPLS and all is great except, my internal network VLAN1 goes all to pieces, internal traffic starts getting blocked, nobody can get DHCP leases, etc. Office B can get on the internet but can't access any hosts on the internal network at Office A. If I take out the Static (inside, inside) 192.168.0.0 192.168.0.0 netmask 255.255.0.0 then Office A's internal network goes back to working fine as it should but we no longer have connectivity back to Office B.