?
Solved

How to create additional networks on layer 3 Cisco switch

Posted on 2014-03-20
5
Medium Priority
?
569 Views
Last Modified: 2014-03-21
I have a layer 3 Cisco switch that is on a 192.168.10.x network. I need to create two additional networks on this switch that I can route out to another site which is connected by an ASA firewall.  How do I create the two additional networks which are 172.16.5.x and 172.16.15.x.  Below is a diagram.  Thanks



[ASA Firewall]------------------[Layer 3 Cisco Switch]
0
Comment
Question by:wayy2be
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 10

Expert Comment

by:Schuyler Dorsey
ID: 39944318
Are you saying 172.16.5.x and 172.16.15.x are in a remote site, and you want your internal machines to be able to reach them?

If this is the case, you would just need the routes created in your l3 switch..

example:
ip route 172.16.15.x 255.255.255.0 172.16.16.4 (where 172.16.16.4 is actually the internal interface of the ASA)

If however, you are actually wanting to create new vlans on your l3 switch and for those two segments to be internal to your network.. you would just need to create the l2 and l3 vlan settings..

example.
vlan 15
interface vlan 15
ip address 172.16.15.254 255.255.255.0
no shutdown
0
 

Author Comment

by:wayy2be
ID: 39944325
I want those two segments to be internal to my LAN but reachable from the other site.  Do I need to assign ports to the VLANs?  Can you explain a little bit more to clarify?  Thanks
0
 
LVL 10

Accepted Solution

by:
Schuyler Dorsey earned 2000 total points
ID: 39944336
The only ports that would need to be assigned to the vlans are the ports where a device would sit.

Eg. If a device on the new vlan will plug into port gi1/0/48,.

conf t
interface gi1/0/48
switchport access vlan 15 (or your new vlan number)
0
 
LVL 17

Expert Comment

by:pergr
ID: 39944652
Keep in mind to also add static routes on the ASA, pointing to the switch as the next hop.

I assume the 192.168.10.x  network is not directly connected on the ASA either, so the routes for the new networks would look similar to the route for 192.168.10.0/24
0
 

Author Closing Comment

by:wayy2be
ID: 39946690
Worked like a charm.  Tnx!
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question