1

I am trying to join two networks together thru the ASA.

I have a 192.168.0.1 network that is the main domain and has its own ISP and is administered by Windows Server 2008 for DNS and DHCP.

I also have a separate network with 4 PCs on a different network with a 192.168.4.1 with its own ISP and is hooked into a Linksys router.

I am new to this but I need the .4 to access some shared drives on the .0. I have tried static routing on both the ASA and the Linksys router. I cannot get them to see each other thru ping but the ARP table in the ASA shows the .4 subnet. I am at a loss and my of given too much info or not enough. Any help is greatly appreciated.

I changed the subnet to 255.255.0.0 and it worked, but I lost some device connectivity on the main network. Could I add a second IP address to the NIC in the .4 subnet to access the .0? Would that cause an issue?

Improve this question
8
  • In same site or not, we miss that info. If same site its more routing, if not, then site to site vpn is your answer
    – yagmoth555 ♦
    Jan 18, 2015 at 20:40
  • Its all on the same site
    – Robbie Offerman
    Jan 18, 2015 at 23:27
  • Why you dont mix them then with a 255.255.0.0 subnet mask
    – yagmoth555 ♦
    Jan 19, 2015 at 0:46
  • I thought about that. Didn't want to have to change all the netowrk settings on all the static devices. Hoping I could route the traffic thru the asa to do it for me
    – Robbie Offerman
    Jan 19, 2015 at 2:12
  • hmm, not a god idea if you can use the computer in the lan directly with the new mask, why you would told me, because the fileshare traffic will go througth a giga switch, not on your 100mbits interface that have already internet traffic
    – yagmoth555 ♦
    Jan 19, 2015 at 2:28

1 Answer 1

Reset to default
1

Cisco ASA has something called security levels, traffic from high level to low level is allowed by default, but you have to configure ACLs to allow traffic to come back. On the other hand, you can configure CBAC on ASA.

Improve this answer
5
  • What is CBAC? Sorry I am very new to the ASA..
    – Robbie Offerman
    Jan 18, 2015 at 23:28
  • CBAC is also a kind of ACL, but it is more flexible than ACLs.
    – billcyz
    Jan 18, 2015 at 23:54
  • What rules would i need to implement?
    – Robbie Offerman
    Jan 19, 2015 at 2:13
  • It depends on your requirements. If you just want to ping successfully, just allow icmp
    – billcyz
    Jan 19, 2015 at 2:14
  • need toaccess a shared drive on the .0 domain...
    – Robbie Offerman
    Jan 19, 2015 at 2:17

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .