Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Design for ASA and Cat4510e integration for VLANs

I currently have a Catalyst 4510e doing intervlan routing between multiple Vlans. I want to install an ASA 5540 into the mix which will have a DMZ and another firewalled PCI segment, that is protected by the ASA. Is there a Cisco article that describes designing maybe a dot1q trunk between the ASA and the 4500 so that I can keep using the 4500 as my core router but use the ASA for routing DMZ and PCI VLAN traffic? What I am looking to do is somehow continue managing vlans via the 4500 but having some of those vlans firewalled and routed by the ASA's. Hope this makes sense.


Re: Design for ASA and Cat4510e integration for VLANs

In your 4506's you would create new firewall VLAN's, but not configure any SVI's (layer 3 interfaces). The default gateway will be the ASA.

Hope that helps.

Check Jon's post for the interface config.

Hall of Fame Super Blue

Re: Design for ASA and Cat4510e integration for VLANs


Yes this is perfectly possible. Attached is a link to creating vlan subinterfaces on the ASA -

You then need to configure the port on the 4510e that the ASA interface connects into as a 802.1q trunk.