I am setting up a new remote office setup with an ASA5520 to a Cisco 2960X switch. I subinterfaced the the ASA inside to allow the Wired and Wireless subnets. On the 2960 I created a Vlan 100 for the wired and Vlan 200 for the wireless. I can ping downstream from the ASA to the switch to both the Vlan100 and Vlan200.
On the switch I can ping upstream to the ASA via vlan100 as it is on the same subnet but I cannot ping upstream from Vlan 200. I thought maybe a ip route statement would work but still no go. Thanks for any insight.
ASA
interface GigabitEthernet0/0
description INSIDE
no nameif
no security-level
no ip address
!
interface GigabitEthernet0/0.1
vlan 100
nameif inside
security-level 100
ip address 192.168.2.1 255.255.255.0
!
interface GigabitEthernet0/0.2
vlan 200
nameif Wireless
security-level 100
ip address 192.168.3.1 255.255.255.0
2960X
interface FastEthernet0
no ip address
!
interface GigabitEthernet1/0/1
switchport access vlan 100
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/2
switchport access vlan 100
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/3
switchport access vlan 100
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/4
switchport access vlan 100
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/5
switchport access vlan 100
switchport mode access
spanning-tree portfast
!
UP to 1/0/44 the same
interface GigabitEthernet1/0/45
description WIRELESS WAPS
switchport trunk native vlan 100
switchport mode trunk
spanning-tree portfast
!
` interface GigabitEthernet1/0/46
description WIRELESS WAPS
switchport trunk native vlan 100
switchport mode trunk
spanning-tree portfast
!
interface GigabitEthernet1/0/47
description Connection to ASA
switchport mode trunk
!
interface GigabitEthernet1/0/48
description X-Connect to Sw2
switchport mode trunk
!
interface GigabitEthernet1/0/49
!
interface GigabitEthernet1/0/50
!
interface GigabitEthernet1/0/51
!
interface GigabitEthernet1/0/52
!
interface Vlan1
no ip address
!
interface Vlan100
ip address 192.168.2.5 255.255.255.0
!
interface Vlan200
ip address 192.168.3.5 255.255.255.0
!
ip default-gateway 192.168.2.1
ip http server
ip http secure-server
!
ip route 192.168.3.0 255.255.255.0 192.168.2.1``