VLAN on SRW2024 and Cisco ASA5505

Question

Hello All,
Here is my current situtation:
3 SRW2024s in one building and a Cisco ASA5505 to the Internet
SRW2024 #1 and #2 are in the same room with one port each connected directly to the ASA. No VLANs setup at all.
SRW2024 #3 is in another room with a direct connection to SRW2024 #1. Again no VLANs at all.
So at this time all internal equipment has Internet access through the ASA. Nothing fancy there except NATing from external IPs to the internal IPs.
This is what I am looking for:
SRW2024 #3 is in a different room and will be what all the server equipment is connected to, so I would like a VLAN solely for that, so that the computer VLAN can talk back and forth to it. And also allow Internet access through the Internet VLAN
SRW2024 #1 is almost completely full with Computers and VoIP phones
SRW2024 #2 has plenty of free space, so what I wanted to create was a VLAN containing the first 4 ports that will be my Internet VLAN (this will be my connection to the Internet (port1), my VoIP PBX that needs direct Internet access (since I have failed multiple times to get it to work behind the ASA) (port2), and the outside interface of the ASA (port3). Then have the inside interface of the  ASA connected directly to the Computer VLAN so that all my computers (on the Computer VLAN)will be able to get Internet access and the ASA will do proper NATing to my e-mail server and a couple of other internal servers (on the Server VLAN).
So how do I set this up properly in the SRW2024 and do I have to get the ASA involved in any capacity beyond the firewall/gateway functionality I am currently using now?

Answer 1

1. Create you desired VLAN on the SRW2024. The default VLAN on the SRW2024 is VLAN 1, meaning this is the untagged VLAN. Configure a trunk port that connects SRW2024 #1 and SRW2024 #3, another trunk port that connects the ASA--- SRW2024 #1 and ASA --SRW2024#2. Make sure that all the trunk ports are member of all the VLANS that you have created on all the switch.
2. Create VLANS on the Cisco ASA and create a trunk port that connects it to both the SRW2024#1 and SRW2024#2. You will also have to create a sub interface on the ASA that will router internet traffic between VLAN's.
Note:if the ASA router has different default VLAN or native VLAN as the SRW2024 which is VLAN 1, you will have to set all the trunk ports on all the SRW2024 to general and indicate the VLAN ID that the ASA is using.