Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

How to add route to L3 Cisco Switch

Posted on 2014-11-19
5
121 Views
Last Modified: 2014-11-20
I have a Cisco ASA5525-x plugged into a Cisco 3850 switch.  The ASA is on a different network than the users plugged into the switch.  I want to be able to ping the ASA from one of the laptops plugged into one of the 3850 ports.  Do I need to add a route to the switch to accomplish this?  If so, how is this done.

Sorry if this is a simple question.

Thanks!
0
Comment
Question by:CipherUser
  • 2
  • 2
5 Comments
 
LVL 17

Expert Comment

by:lruiz52
ID: 40453526
Can you post a sanitised config of your Switch and ASA?

you will need to ad a route on the L3 Switch (maybe default route)

you will also need to create and ACL on the ASA to allow Ping traffic from user network.
0
 

Author Comment

by:CipherUser
ID: 40453584
Attached is the 3850 Switch config.  I cannot provide the ASA config.  The firewall I'm trying to ping is 10.89.x.x.

Thanks for any help you can provide!
3850Config.txt
0
 

Author Comment

by:CipherUser
ID: 40453594
Oh and I'm told the ASA is pingable from other devices on the 10.89.x.x network, so an ACL might not be needed.
0
 
LVL 17

Accepted Solution

by:
lruiz52 earned 500 total points
ID: 40453631
from the config, your switch is working in L2 mode not L3. if your ASA is connected to your switch , THe ASA's internal IP is 192.168.97.2, and the 10.89.x.x would be the ASA's Outside IP and you would not be able to ping that.

why do you want to ping the ASA on address 10.89.x.x, you should be able to ping the ASA on ip 192.168.97.2 unless there is a ACL on the ASA that block ping(ICMP)..
0
 
LVL 18

Expert Comment

by:Akinsd
ID: 40453971
Confirm the model of your switch.
It looks like it is an L2 switch, I didn't see "no ip routing" or "ip routing" command in the running config.

Go into config mode and run the following command
ip routing.

Check the config if it registers (in case you don't get an error)
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question