ASA 5505 / Ethernet Channel – NO. 2 (DRAFT)- NETWORK SETUP in Same Building

[SUMMARY / AIMS]

Now we will need to carry on our upgrading network infrastructure, implement Link aggregation and also prepare a network 172.32.0.0 /16 in other building, in order to implement site to site vpn connection after few months (Please make sure that the 172.32 network can ping to our existing building). Fault Tolerance to the ASA is needed, in case 1 ASA Failed, More than 100 users will do nothing but only reach to internal network and no Email services.

Additional Devices added base on existing infrastructure:

2 no. x Cisco ASA 5505

1 no. x Cisco Router 4331

[CONFIGURATION]

[SPANNING TREE]

By Default Spanning Tree root is “SWL3- COL-1”, as its port channel mac address is lowest (“0001.6410.58E5”). But on VLAN1 we want to “SWL3-COL-2” to be the root Bridge. As we are running inner vlan on “SWL3-2”

[FAULT TOLERANCE]

2no. x ASA are connected to the ISP, In case

[RESULT]

All setup is fine. Now on Network 172.32.0.0 network is able to ping in the building at G/F, 1/F and 2/F. You can see it in Figure 4.1 and 4.2 below