Note The ASA 5505 adaptive security appliance supports Active/Standby failover, but not Stateful failover. You can configure trunk ports to accomodate multiple VLANs per port.
#Setup cisco asa 5505 license
Figure 4- Adaptive Security Appliance with Base License Internet ASA 5505 with Base License Home Business With the Security Plus license, you can configure 20 VLAN interfaces.
See Figure 4-1 for an example network where the Home VLAN can communicate with the Internet, but cannot initiate contact with Business. 4-2ģ Interface Overview With the Base license, the third VLAN can only be configured to initiate traffic to one other VLAN. An active VLAN is a VLAN with a nameif command configured.
In routed mode, you can configure up to three active VLANs with the Base license, and up to 20 active VLANs with the Security Plus license. Maximum Active VLAN Interfaces for Your License In transparent firewall mode, you can configure two active VLANs in the Base license and three active VLANs in the Security Plus license, one of which must be for failover. Note Subinterfaces are not available for the ASA 5505 adaptive security appliance. But when a switch port on VLAN 1 wants to communicate with a switch port on VLAN 2, then the adaptive security appliance applies the security policy to the traffic and routes or bridges between the two VLANs. Switch ports on the same VLAN can communicate with each other using hardware switching. To segregate the switch ports into separate VLANs, you assign each switch port to a VLAN interface. VLAN interfaces let you divide your equipment into separate VLANs, for example, home, business, and Internet VLANs. See the Maximum Active VLAN Interfaces for Your License section for more information about the maximum VLAN interfaces. In transparent mode, these interfaces forward traffic between the VLANs on the same network at Layer 2, using the configured security policy to apply firewall services. Logical VLAN interfaces In routed mode, these interfaces forward traffic between VLAN networks at Layer 3, using the configured security policy to apply firewall and VPN services. You can connect these interfaces directly to user equipment such as PCs, IP phones, or a DSL modem. See the Power Over Ethernet section on page 4-4 for more information. There are two kinds of ports and interfaces that you need to configure: Physical switch ports The adaptive security appliance has eight Fast Ethernet switch ports that forward traffic at Layer 2, using the switching function in hardware.
#Setup cisco asa 5505 mac
This chapter includes the following sections: Interface Overview, page 4-1 Configuring VLAN Interfaces, page 4-5 Configuring Switch Ports as Access Ports, page 4-9 Configuring a Switch Port as a Trunk Port, page 4-11 Allowing Communication Between VLAN Interfaces on the Same Security Level, page 4-13 Interface Overview This section describes the ports and interfaces of the ASA 5505 adaptive security appliance, and includes the following topics: Understanding ASA 5505 Ports and Interfaces, page 4-2 Maximum Active VLAN Interfaces for Your License, page 4-2 Default Interface Configuration, page 4-4 VLAN MAC Addresses, page 4-4 Power Over Ethernet, page 4-4 Security Level Overview, pageĢ Interface Overview Chapter 4 Understanding ASA 5505 Ports and Interfaces The ASA 5505 adaptive security appliance supports a built-in switch.
Note To configure interfaces of other models, see Chapter 5, Configuring Ethernet Settings and Subinterfaces, and Chapter 7, Configuring Interface Parameters.
#Setup cisco asa 5505 how to
1 CHAPTER 4 Configuring Switch Ports and VLAN Interfaces for the Cisco ASA 5505 Adaptive Security Appliance This chapter describes how to configure the switch ports and VLAN interfaces of the ASA 5505 adaptive security appliance.
0 kommentar(er)
