Route VLAN through Cisco ASA
Posted on 2013-01-29
I have created a Vlan on our vmware virtual switch. I have created a server VM1 and added it to that vlan and given it an IP address. I have created a windows virtual router as well and placed one nic on the Vlan and one nic on the main network and gave a static IP on both. The gateway of VM1 is the IP of the vlan network interface on the router. I can ping the vlan IP on the router. I then was not able to ping SERVER1 on the main network. I created a static route on SERVER1 for the vlan and was able to ping SERVER1 from VM1. So I can now successfully ping from one network to another as long as the static route is on the machine. VM1 does not have internet access though. The router has internet access because it has a nic on the main network. The internet gateway for the main network is a Cisco ASA. The router and SERVER1 can ping the ASA but the VM1 can't ping the ASA and the ASA can't ping VM1. I created a subinterface on the Internal interface on the ASA and set it up on the same vlan ID but no such luck. I ran packet tracer on the ASA on the subinterface, from the IP of the subinterface to the IP of VM1 and it says that it fails at the access rules. I went to the access rules and created a rule for any any IP permit with no change. What am I missing?