Cisco ASA Lab in GNS3 - Which topology

[DJMK4]

Hi all,

This is just a general question, I am setting up a Cisco ASA Lab in GNS3, I just wanted some opinion.

I only want two run two asa's on two networks which will be used for the two networks, and test things like traffic routing between the two networks, setting up VPN's, firewall rules, NAT's and seeing if I can replicate HA pair syncing.

I am not sure what way would be best to set-up this topology.


As you can see my set-up at the moment, I have one firewall which is connected to a standard ethernet switch, which is then connected to my loopback adaptor, the loopback adaptor is so I can test ping and connectivity from my lab machine.

If I wanted to add another firewall in to the equation, what would be best in being able to encorporate two firewalls? would a physical link be needed between the two? or some sort of WAN simulation?

If I am going about this in completely the wrong way let me know.

 

[DJMK4]

I did come up with this, what do you think?

 

[V-Spec]

I've not really connected firewalls to a lab machine via loopbacks in GNS3 before, but could you simple use VLAN separation by trunking each network into the lab machine, that way both portions of the network are seperate and you can route to both via the PC,

Just create multiple loopbacks and tag them with the right Vlans, (I think this will do what you want it to)