Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA 5500

guys if we have 7 servers and we want to create 5 DMZ.......on ASA is it possible.....I have gone through ASA data sheet but it doesnt tell how many  DMZ

it can have......what is vlans does num,ber of vlans represent number of DMZ the firewall can have......

we have 7 servers attached to a cisco 3750 swicth and we have to secure it do we have to connect each server with the firewall or we can have trunk and put each server on different vlan i am confused regardinhg the concept how to do that

5 REPLIES

Re: ASA 5500

Hi,

Depending on the exact model, then you know how many DMZ interfaces you can have.

i.e

The 5505 can have up to three physical working interfaces (you can have up to 20 VLANs).

Bigger models can have more interfaces.

You can compare the models here:

http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html

Federico.

New Member

Re: ASA 5500

Thanks for your kind reply i am trying to get my head around for number of DMZ doesnt number of DMZ depends on number of vlans firewall can have for example as you have said that 5505 can have up to 3 vlan and 20 in trunking so doest this mean that it can have 3 different DMZ and 20 different DMZ???? what is the concept for vlans and DMZ thanks again

Re: ASA 5500

DMZs can refer to physical interfaces (in the example of the ASA 5505, you cannot have more than 3 routed interfaces).

But doing VLANs, you can separate logically and segment the network in more logical interfaces.

So, you can have up to a lot more than 3 DMZs (using VLANs), the difference is that they will belong to the same physical interface.

Federico.

New Member

Re: ASA 5500

Thanks for your quick reply so it means that if i attach a switch with it and plug 7 servers to that swicth and create 7 vlans in the asa and trunk the port of asa to the switch so it means that i can have 7 DMZ easily???? is that right

Re: ASA 5500

Yes, but for the 5505 you can have up to 20 VLANs if having the Security Plus license installed.

Check the link that I sent you.

Federico.

228
Views
0
Helpful
5
Replies