I curious if a asa (v7.0.7) can route traffic in and out sub interfaces. Please see the attached diagram. Our ISP is handing off a 802.1q tagged ethernet connection to us. One vlan is for internet connectivity and the other is for a private lan. We have the private lan working correctly with no nat. I'll like to route all internet traffic from the 172.30.1.x network through the asa and out to the internet using 126.96.36.199 as the pat address (of course this is not the real address for this discussion) I'd also like to route traffic from the 172.31.255.x network through the asa to the 172.30.1.x network.