Network topology

ASG220 v9.003-16

Topology
Modem (bridge) <-> [wan] ASG 220 [internal] <-> Cisco 3560 <-> Cisco 2960s

Cisco 3560
SVI 10.0.1.241. Vlan 100
SVI 10.0.10.241. Vlan 10
SVI 10.0.50.241. Vlan 50

ASG 220 INTERNAL 10.0.1.253

When connected directly to the ASG 220 internal interface with 10.0.1.252/24 I'm able to ping the ASG 220 and browser the Internet. When connected to the Cisco 2960s with 10.0.10.50/24 GW 10.0.10.241 I'm able to ping the ASG 220 but UNABLE to browse the Internet. I am able to ping other devices on the 10.0.10.0/24 network as well as the SVI interfaces.

I've tried creating an alias 10.0.10.253 and 10.0.50.253 on the internal interface including changes needed to Network / DNS, Network Protection / Masquerading & Network Protection / Firewall / Web Surf and DNS to allow traffic out. However I can't ping either 10.0.10.253 or 10.0.50.253.

The following static route was created on the Cisco 3560 10.0.0.0/8 via 10.0.1.253.

Any assistance would be greatly appreciated.
I'm not convinced that routing on the Cisco 3560 has been setup correctly although it appears to be correct as far as I can tell. I am though thinking that I'm missing something on the ASG 220 that will bring it all together.

Feel free to ask any questions.

Cheers,
Dizzy