Solved

How to configure a 3750 and asa5515 for internet access

Posted on 2013-01-19
2
598 Views
Last Modified: 2013-01-22
I have a cisco 3750 acting as a distribution switch a cisco 2960 as a access switch and a ASA 5515 as my way out to the internet how do I bring this together
0
Comment
Question by:granthd
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 17

Accepted Solution

by:
lruiz52 earned 500 total points
ID: 38797399
can you post sanitized configs of your switches and the ASA?
0
 
LVL 20

Expert Comment

by:rauenpc
ID: 38801478
3750 will be configured with at least 2 vlans. One vlan for routing to the ASA, and all other vlans for your LAN. The 3750 needs a default route pointed at the ASA -this can be done statically or via dynamic routing protocol such as OSPF or EIGRP. The ASA will need to have a route pointed at the 3750 for all internal subnets - this, like the default route, can be done via static or dynamic routing protocols.

From here it's just straight configuration on the devices. Configure your firewall with whatever ACL, NAT, and VPN you might need, and configure your switches with any vlans, trunks, or policies you need to use.

If you plan to configure  DMZ on the firewall, use a separate interface on the firewall to connect to the 3750, and the DMZ vlan should be layer 2 only - let the firewall be the default gateway for all DMZ traffic unless you plan to configure advanced features on the switch like VRF or MPLS.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question