asa - dot1q-switch

Unanswered Question
Jan 29th, 2008

Hi there

I have a small project to set up mini-hosting on ISP hosting space.

I thought to use cisco asa and swicth, connect them by dot1q, put every web server on own vlan.

My questions are:

1. can I implement that on asa/swicth configuration?

2. is there something similar to committed access rate (car) on asa?

3. should I use something else?

Thanks, vects.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
JORGE RODRIGUEZ Tue, 01/29/2008 - 13:35



Sure you can use 802.1q trunking between asa and external switch provided you have created vlans on switch and subinterfaces on asa respectvately.


As far as Im aware there is not support for car on asa.You will need to implemnent this on switch with code that supports car.



cisvects Wed, 01/30/2008 - 01:19


Is there another way to rate limit traffic by asa per vlan?

Do I need Layer3 switch for that?

ohanusi2000 Wed, 01/30/2008 - 04:34


If you are running version 7 and above you can policy the traffic, by creating a clas-map, match this to the access-list specifing the traffice in question and apply this to your policy map on that intreface .



This Discussion