VLAN Routing

[encarter]

So we have an edge router that is doing everything your can possibly think (NAT, Firewall, VPN, MPLS Traffic, Internet traffic etc).
We bought some ASA's and want to offload the Firewall and VPN stuff to it.

However im having trouble getting my head around the setup. The physical view of the network will be Edge_Router---Switch---ASA

The idea is that we want to tag the various interfaces on the edge router (i guess by encapsulation dot1q VLAN_NUM), and then send somehow all that traffic through the switch and onto the ASA and back out to switch again.

Im having trouble understanding how i get the traffic from the router to the ASA.

Help! lol.

 

[unclerico]

I have to question why you have the switch between the Router and the ASA?

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[encarter]

because going into the edge router we have a DS3, which is carrying MPLS (internal), and Internet traffic on the same circuit. We also have two other internet circuits.

We will also be implementing another edge router with will also have another (backup DS3 connection).

 

[encarter]

any ideas guys?