I have a setup where the ASA 5510 is acting as the default gateway for devices connected to an L2 switch connected to the ASA.
The basic setup is:
ASA -> L2 switch -> Servers
The servers have their gw set to the subinterface ip on the ASA but for some reason, the servers cannot be pinged from the switch itself nor from the firewall.
Here is the config of the ASA:
interface Ethernet0/0 nameif outside security-level 0 ip address 18.104.22.168 255.255.255.240 ! interface Ethernet0/1 nameif inside security-level 100 ip address 10.99.1.1 255.255.255.0 ! interface Ethernet0/1.102 vlan 102 nameif internal security-level 100 ip address 10.1.2.2 255.255.255.0
the default gw on the ASA goes out to the provider uplink.
the default gw on the switch is the ASA. the port on the switch connected to the fw is setup as a trunk.
The config for the L2 switch is basically this.
vlan 1 vlan 102 int vlan 1 ip add 10.99.1.2 255.255.255.0 int g0/1 desc To-ASA-5510 switchport trunk encap dot1q switchport mode trunk int g0/2 switchport access vlan 102 int g0/3 switchport access vlan 102 ip default-gateway 10.99.1.1
The servers are connected to ports 2+3.
What am I missing here? Are there specific firewall rules that need to be created at all?