We are looking at redesigning our current infrastructure, currently we have a Cisco 3060 concentrator that terminates all client and site-2-site tunnels and all traffic is directed to our corporate dmz interface (firewall) for the next hop. All extranet traffic flows though our existing extranet interface on our coroprate Firewall.
What we want to do today is possibly use a Cisco 5540+ to terminate all Site-2-Site tunnels and our normal extrnet traffic. I am use to a Cisco asa 5510 which only had one public interface and several inside interfaces. Does the Cisco ASA 5540 give you the ability to have server external interfaces and several internal interfaces? Example all our VPN traffic would terminate to our DMZ interface internally and all our extranet traffic our terminate to a different interface rather then haveing them all terminate on the same interface?
