Hello all -
We have two locations, HQ and a Datacenter. We've been using a site-to-site VPN over the public Internet to connect the two locations.
We recently had a point-to-point ethernet circuit installed by FPL Fibernet and want to utilize that and remove the site-to-site VPN. Here is the equipment at each end:
ASA 5510s providing Internet access and site-to-site VPN
2 Cisco 3750s as core switch stack in each location, directly connected to the inside interface on the ASA
Dell Servers/SAN hanging off various ports on the 3750s at each location
Each location is a separate VTP domain with it's own VLANs. The FPL connection is plugged into int gig 2/0/47 in the Datacenter and int gig 1/0/48 in HQ. Here's my problem...
I'm unclear how each site will see the other if both interfaces are merely configured as trunk ports. Since the HQ switches don't know where the vlans/subnets live in the Datacenter, how will they know to pick up the L2 traffic off the trunk and route it?
I thought that perhaps it would be better to configure the interface on each end to be an IP port, then add static routes on each switch to point to the subnets/VLANs on the other side. However, when I do this I'm unable to ping the interface on the other side or any subnets in the other site.
Could you help point me in the right direction? Happy to provide configs or diagrams if needed.