How to configure VLAN subinterfaces on Cisco ASA 5500 firewall?
Connect the internal interface of ASA to a switch port which must be trunk port. Then configure subinterfaces on ASA physical interface. Each subinterface of ASA must be a separate layer2 vlan and a different layer3 subnet. Each subinterface of ASA will be a separate network security zone with its own security level.
How many VLANs can I use on my Asa laptop?
There are limits on the number of VLANs supported on each ASA model, according to the following list: ASA 5505: Max 20 VLANs (with the Security Plus Software) ASA 5510: Max 100 VLANs (with the Security Plus Software)
What are the advantages of a Cisco ASA firewall?
One of the advantages of the Cisco ASA firewall is that you can configure multiple virtual interfaces (subinterfaces) on the same physical interface, thus Networks Training About My Books SUGGESTED TRAINING You are here: Home /Cisco ASA Firewall Configuration /How to Configure VLAN subinterfaces on Cisco ASA 5500 Firewall
Is the ASA a VLAN or a security zone?
The physical interface on the ASA will become a trunk interface which is not assigned to any security zone. Each sub-interface will be configured for a VLAN, security zone and security level. Here’s a picture to visualize this:
Are there any logical interfaces in Cisco ASA?
Luckily the ASA supports trunking and logical interfaces which means we can create multiple logical sub-interfaces on a single physical interface. Each sub-interface can be assigned to a different security zone and they are separated by VLANs.
What are the sub-interfaces of a Cisco VLAN?
In the example above we have a Ethernet 0/0 physical interface and two sub-interfaces: Ethernet 0/0.10 will be used for security zone “INSIDE1” and uses VLAN 10. Ethernet 0/0.20 will be used for security zone “INSIDE2” and uses VLAN 20.
Where does the ASA port go in a switch?
The ASA port (e0/0 in this example) would go to a trunk port set to allow all the vlans configured on the ASA (48 and 101, here) The ASA is then the router between those VLANs. Any address assigned to the switches would be purely for management. And they would assigned to a VLAN, not a port.
When to use cisco adaptive security appliance ( Asa ) 5505?
But when a switch port on VLAN 1 wants to communicate with a switch port on VLAN 2, then the adaptive security appliance applies the security policy to the traffic and routes or bridges between the two VLANs. Note Subinterfaces are not available for the ASA 5505 adaptive security appliance.
Why do you need subinterfaces for multiple VLANs?
Because there is one trunk between swich and router so we need sub interfaces for multiple vlans. If you are using a layer 3 switch then you dot need any sub interfaces so then you can create vlan interface with the default gateway. You need to enable ip routing first. Hope this will help. Please rate if this helps. 10-01-2012 09:46 PM