Solved

How to create additional networks on layer 3 Cisco switch

Posted on 2014-03-20
5
558 Views
Last Modified: 2014-03-21
I have a layer 3 Cisco switch that is on a 192.168.10.x network. I need to create two additional networks on this switch that I can route out to another site which is connected by an ASA firewall.  How do I create the two additional networks which are 172.16.5.x and 172.16.15.x.  Below is a diagram.  Thanks



[ASA Firewall]------------------[Layer 3 Cisco Switch]
0
Comment
Question by:wayy2be
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 10

Expert Comment

by:Schuyler Dorsey
ID: 39944318
Are you saying 172.16.5.x and 172.16.15.x are in a remote site, and you want your internal machines to be able to reach them?

If this is the case, you would just need the routes created in your l3 switch..

example:
ip route 172.16.15.x 255.255.255.0 172.16.16.4 (where 172.16.16.4 is actually the internal interface of the ASA)

If however, you are actually wanting to create new vlans on your l3 switch and for those two segments to be internal to your network.. you would just need to create the l2 and l3 vlan settings..

example.
vlan 15
interface vlan 15
ip address 172.16.15.254 255.255.255.0
no shutdown
0
 

Author Comment

by:wayy2be
ID: 39944325
I want those two segments to be internal to my LAN but reachable from the other site.  Do I need to assign ports to the VLANs?  Can you explain a little bit more to clarify?  Thanks
0
 
LVL 10

Accepted Solution

by:
Schuyler Dorsey earned 500 total points
ID: 39944336
The only ports that would need to be assigned to the vlans are the ports where a device would sit.

Eg. If a device on the new vlan will plug into port gi1/0/48,.

conf t
interface gi1/0/48
switchport access vlan 15 (or your new vlan number)
0
 
LVL 17

Expert Comment

by:pergr
ID: 39944652
Keep in mind to also add static routes on the ASA, pointing to the switch as the next hop.

I assume the 192.168.10.x  network is not directly connected on the ASA either, so the routes for the new networks would look similar to the route for 192.168.10.0/24
0
 

Author Closing Comment

by:wayy2be
ID: 39946690
Worked like a charm.  Tnx!
0

Featured Post

Secure Your WordPress Site: 5 Essential Approaches

WordPress is the web's most popular CMS, but its dominance also makes it a target for attackers. Our eBook will show you how to:

Prevent costly exploits of core and plugin vulnerabilities
Repel automated attacks
Lock down your dashboard, secure your code, and protect your users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Tracert fails final hop at some client offices 3 46
pfsense upgrade from 2.2.6 to 2.3.3 28 86
URL question - What is port 8888? 5 102
Network access 24 57
PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question