07-16-2008 06:48 AM - edited 02-21-2020 02:55 AM
Hi to all,
i need to configure a subinterface as inside and i want to know if i need to configure a vlan in order to make it work or if is possible to avoid the vlan.
07-16-2008 09:05 AM
Hi,
There is no other way than to use VLANs.
The ASA interface will be configured as trunk, while for each VLAN you will configure subinterfaces. Assign one VLAN ID per interface.
The IP of the ASA on each subinterface will be the default gateway for the devices on that subnet.
interface GigabitEthernet0/1
description "Trunk Connectivity with SW"
speed 100
duplex full
no nameif
no security-level
no ip address
!
interface GigabitEthernet0/1.100
vlan 100
nameif VLAN100
security-level 80
ip address xxxxxxx
!
interface GigabitEthernet0/1.200
vlan 200
nameif VLAN200
security-level 70
ip address xxxxxxx
!
interface GigabitEthernet0/1.300
vlan 300
nameif VLAN300
security-level 60
ip address xxxxxxx
An example with VLANs and remote access VPNs:
BTW, ASA does not have Native VLAN support. So if you need VLAN 1 for some reason, you need to create a subinterface for it.
Please rate if this helped.
Regards,
Daniel
07-16-2008 10:26 AM
the physical interface can pass untagged packets.
http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/intrface.html#wp1044006
what version OS does the pix515 use?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide