Deployment Scenarios With Vlans - Cisco ASA 5505 Getting Started Manual

Deployment Scenarios with VLANs

Deployment Scenarios with VLANs
Cisco ASA 5505 Getting Started Guide
2-2
With the Base license, each switch port can be assigned to any one VLAN at a
time. That is, configuring a single port to trunk between the VLANs of an external
switch is not possible. However, with the Security Plus license, you can use a
single port to trunk between three VLANs on an external switch.
Physical interfaces on the same VLAN communicate with each other using
hardware switching. Security policies can be applied to all communications
between VLANs to enable strict access control and protection of sensitive devices
in the Business VLAN.
VLANs can be configured in both Layer 2 Transparent mode as well as in the
Layer 3 Routed mode. (In routed mode, forwarding is done based on the route
table. In transparent mode, forwarding is done based on the Layer 2 bridge table.)
This section describes several deployment scenarios using the ASA 5505 in which
the network is divided into VLANs.
This section includes the following topics:
Scenario 1: Inside VLAN with External Connectivity, page 2-3
•
Scenario 2: Multiple VLANs, page 2-4
•
Scenario 3: Network with an Inside VLAN and Dual ISP Connectivity,
•
page 2-5
Scenario 4: Private VLAN Services, page 2-6
•
Chapter 2 Planning for a VLAN Configuration
78-17612-01