Networks

Ask something
Discussion Locked

ASA 5510 Two Internal Interface Configuration

0 helpful
1 reply

by ksecer 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,
I want to configure ASA 5510 such that
Eth 0/0 , IP : 192.168.2.1 Security Level:100
Eth 0/1 , IP : 192.168.3.1 Security Level:100
Eth 0/2 , IP : 212.175.x.x Security Level:0

Eth0/0 is inside1
Eth0/1 is inside2
Eth0/3 is outside

i want to perform that two inside interface clients can communicate each other , and access to internet via outside.

firstly,
I checked "Enable Traffic Between Same Security Level Interfaces" , and inside1 and inside2 communicate each other.
than, i added PAT for these networks can access to internet , after that inside1 and inside2 can access to internet ,but cann't communicate each other. I want that inside1 and inside2 can communicate each other and can access to internet too.

there is any suggestion? Pls help me.
thansk.

1 reply

by jimbobmcgee

...do you have any nat 0 settings for your interfaces?

I found that, when I enabled same-security-interface, I needed to prevent NAT'ing from occurring for traffic leaving eth0/0's subnet going to eth0/1's subnet:

same-security-traffic permit inter-interface

access-list inside1_nat0_outbound extended permit ip 192.168.2.0 255.255.255.0 192.168.3.0 255.255.255.0
access-list inside2_nat0_outbound extended permit ip 192.168.3.0 255.255.255.0 192.168.2.0 255.255.255.0

global (outside) 10 interface
nat (inside1) 0 access-list inside1_nat0_outbound
nat (inside1) 10 0.0.0.0 0.0.0.0
nat (inside2) 0 access-list inside2_nat0_outbound
nat (inside2) 10 0.0.0.0 0.0.0.0

This discussion is closed to new replies.