Solved

How to add route to L3 Cisco Switch

Posted on 2014-11-19
5
124 Views
Last Modified: 2014-11-20
I have a Cisco ASA5525-x plugged into a Cisco 3850 switch.  The ASA is on a different network than the users plugged into the switch.  I want to be able to ping the ASA from one of the laptops plugged into one of the 3850 ports.  Do I need to add a route to the switch to accomplish this?  If so, how is this done.

Sorry if this is a simple question.

Thanks!
0
Comment
Question by:CipherUser
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 17

Expert Comment

by:lruiz52
ID: 40453526
Can you post a sanitised config of your Switch and ASA?

you will need to ad a route on the L3 Switch (maybe default route)

you will also need to create and ACL on the ASA to allow Ping traffic from user network.
0
 

Author Comment

by:CipherUser
ID: 40453584
Attached is the 3850 Switch config.  I cannot provide the ASA config.  The firewall I'm trying to ping is 10.89.x.x.

Thanks for any help you can provide!
3850Config.txt
0
 

Author Comment

by:CipherUser
ID: 40453594
Oh and I'm told the ASA is pingable from other devices on the 10.89.x.x network, so an ACL might not be needed.
0
 
LVL 17

Accepted Solution

by:
lruiz52 earned 500 total points
ID: 40453631
from the config, your switch is working in L2 mode not L3. if your ASA is connected to your switch , THe ASA's internal IP is 192.168.97.2, and the 10.89.x.x would be the ASA's Outside IP and you would not be able to ping that.

why do you want to ping the ASA on address 10.89.x.x, you should be able to ping the ASA on ip 192.168.97.2 unless there is a ACL on the ASA that block ping(ICMP)..
0
 
LVL 18

Expert Comment

by:Akinsd
ID: 40453971
Confirm the model of your switch.
It looks like it is an L2 switch, I didn't see "no ip routing" or "ip routing" command in the running config.

Go into config mode and run the following command
ip routing.

Check the config if it registers (in case you don't get an error)
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Arrow Electronics was searching for a KVM  (Keyboard/Video/Mouse) switch that could display on one single monitor the current status of all units being tested on the rack.
WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question