#What is router on a stick how to#

You could have both ASAs use 192.168.10.1 if they operated as a failover pair but not as stand alone. Since the ASAs will operate as stand alone and not as a failover pair then each ASA will have its own IP address in each vlan.

#What is router on a stick how to#

The problem is with #6 and how to get the ASAs to continue inter vlan routing if one of the ASAs fails. I do anticipate one significant problem in getting this to work. The firewalls will do the inter vlan routing and the routing and security policy for traffic to outside. The switches will configure the layer 2 vlans and assign access ports to the appropriate vlan and will connect to the firewalls with trunk ports. The gateway for the vlans must be the firewalls. If this is the most important requirement then it becomes clear that the switches should act as layer 2 switches, not as layer 3 and therefore the switches will not perform as gateway for the vlans. Inter-vlan traffic must be routed via the firewalls. Thank you for the additional information and especially for this clarification ' 5. Router's subinterfaces as the gateways for the laptops are not possible as there is 1 more similiar router-on-a-stick (this is used as a redundant router-on-a-stick) on the switch. H, thanks for replying, the topology is as attached. Any ideas on how to make this work if the gateway is on the switch? The gateway on the router is not possible. I even tried the ip default-gateway on the layer 2 switch but same result. I tried to ping or traceroute from laptop 1 to laptop 3 but not reachable. I configured OSPF 1 with all the connected routes and also redistributed the connected into the OSPF 1 area 0. All the sub-interfaces are directly connected routes. An interface on the router is configured with sub-interfaces with the respective VLAN connected to a switch trunk port on the layer 2 for VLAN trunking. Next, I have a router configured on a stick. The gateways are 192.168.10.2 for laptop 1 from VLAN 10, 192.168.20.2 for laptop 2 from VLAN 20 and 192.168.30.2 for laptop 3 from VLAN 30 (meaning the SVIs in the payer 2 switches are the gateways of each laptop). I have 3 laptops (each laptop is connected to VLAN 10, VLAN 20 and VLAN 30 respectively), connected to a layer 2 switch. I have a requirement which is quite strange.