I'm trying to configure our network to separate it through DMZ. Basically allowing full access from each network to the servers but blocking access from these networks communicating with each other’s.
The way I have it setup:
Servers - 192.168.10.x/24 Data - 192.168.30.x/24 Dev - 192.168.40.x/24
So data is blocked between Dev/Data but full access is given to servers. The DHCP is where i'm having the issue. I would like the server’s network to be able to assign data/dev their IP addresses.
Can you think of any way this is possible? I can enable DHCP on the asa5505 but its messy and not as easy to see who's using what. we are about to change everything to mac authentication on all wireless devices so using the asa5505 as the DHCP server will not work long term.
Any help would be greatly appreciated!
Thanks for your time.