Configure the core switch as the gateway and tap Create Service Network. The switches are on a 'management' VLAN range and I have a 3rd party ASA router that needs to be on a /30 'internet breakout' range. I normally point my edge. Can aggregation switches handle VLANIF interfaces? Will using the core as a gateway overburden it? Is it secure to place gateways at the access layer? After reading this article, you'll be able to determine where and how to properly deploy your gateways. what subnet/VLAN should the default gateway be in)? This really depends on what your VLANs. "Campus Networks Typical Configuration Examples" provides typical campus network networking modes and a variety of deployment examples. Perform either of the sub-steps.