Chapter 2 Planning For A Vlan Configuration; Understanding Vlans - Cisco ASA 5505 Getting Started Manual

Understanding VLANS

78-17612-01
Planning for a VLAN Configuration
Before you install the ASA 5505, you should consider whether you want to use
the device to segment your network into VLANs. This chapter describes the
options and benefits of deploying the ASA 5505 in a VLAN configuration and
presents several typical VLAN scenarios.
If you do not want to use VLANs in your ASA 5505 configuration, continue with
Chapter 3, "Installing the ASA 5505."
This chapter includes the following sections:
Understanding VLANS, page 2-1
•
Deployment Scenarios with VLANs, page 2-2
•
• Maximum Number and Types of VLANs, page 2-7
What to Do Next, page 2-8
•
On the ASA 5505, you can divide the eight physical interfaces into groups, called
VLANs, that function as separate networks. Grouping ports into VLANs enables
you to segment large private networks and provide additional protection to critical
network segments that may host resources such as servers, corporate computers,
and IP phones.
You can group ports into a maximum of three VLANs (for example, one each for
Personal use, Business, and Internet). Using VLANs, you can also segregate
network traffic so that even devices on the same VLAN are unable to
communicate with each other.
C H A P T E R
Cisco ASA 5505 Getting Started Guide
2
2-1