Solved

HP Procurve 2910 VLAN routing to Cisco ASA Issue

Posted on 2013-01-03
4
1,563 Views
1 Endorsement
Last Modified: 2013-01-04
I have a Cisco ASA 5510 as my firewall.  the ASA is connected to an HP Procurve 2910.  I have a couple of VLANs configured on the Procurve.  Only the VLAN with the connection to the ASA  (VLAN 10)  can access the internet.  

How do I create a route for the other VLANs to the internet?  My Procurve config is listed below:

hostname "ProCurve 2910al-48G Switch"
module 1 type J9147A
ip routing
vlan 1
   name "DEFAULT_VLAN"
   untagged 21-48
   ip address dhcp-bootp
   no untagged 1-20
   exit
vlan 10
   untagged 1-10
   ip address 10.117.7.1 255.255.255.0
   exit
vlan 20
   untagged 11-20
   ip address 10.117.5.1 255.255.255.0
   exit
ip route 0.0.0.0 0.0.0.0 10.117.7.254
snmp-server community "public" unrestricted
password manager

show ip route:
 IP Route Entries

  Destination        Gateway         VLAN Type      Sub-Type   Metric     Dist.
  ------------------ --------------- ---- --------- ---------- ---------- -----
  0.0.0.0/0          10.117.7.254    10   static               1          1    
  10.117.5.0/24      Clients         20   connected            1          0    
  10.117.7.0/24      Servers         10   connected            1          0    
  127.0.0.0/8        reject               static               0          0    
  127.0.0.1/32       lo0                  connected            1          0    



Thanks for your help!
1
Comment
Question by:jmichael18
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 5

Assisted Solution

by:Leeeee
Leeeee earned 100 total points
ID: 38742089
Users in VLAN 20 will use the default route (ip route 0.0.0.0 0.0.0.0 ASA) to get to the internet, you won't need to configure another route on the Procurve.

Do you have static routes on the ASA pointing back to the other networks on the Procurve?

I assume NAT is configured correctly for the 10.117.5.0/24 network on the ASA?

Please post config of the ASA if the above doesn't resolve your issue.
0
 
LVL 17

Expert Comment

by:jburgaard
ID: 38742133
As Leeeee pointed out on the 10.117.7.254 you need
ip route 10.117.5.0/24 via gateway 10.117.7.1

Also all hosts should have the IP of their vlan as default-gateway  (like 10.117.5.1 in vlan 20).
0
 
LVL 34

Accepted Solution

by:
Istvan Kalmar earned 400 total points
ID: 38742204
Hi,

You need on asa:

nat (inside) 1 10.117.5.0 255.255.255.0
route inside 10.117.5.0 255.255.255.0 10.117.5.01
0
 
LVL 5

Expert Comment

by:Leeeee
ID: 38742219
Cool Hijacks
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question