Deployment Scenarios Using Vlans - Cisco ASA 5505 Getting Started Manual

Deployment Scenarios Using VLANs

Table 3-1 License Restrictions on Active VLANs
License Type Mode
Base Platform
Transparent Mode
Routed Mode
Security Plus
Transparent Mode
License
Routed Mode
Note
Deployment Scenarios Using VLANs
ASA 5505 Getting Started Guide
3-4
The ASA 5505 adaptive security appliance supports active and standby failover,
but not Stateful Failover.
The number of VLANs you need depends on the complexity of the network into
which you are installing the adaptive security appliance. Use the scenarios in this
section as a guide to help you determine how many VLANs you need and how
many ports to allocate to each.
This section includes the following topics:
Basic Deployment Using Two VLANs, page 3-5
•
DMZ Deployment, page 3-7
•
• Teleworker Deployment Using Three VLANs, page 3-8
Chapter 3
Connections
Up to two active VLANs.
Up to three active VLANs. The DMZ VLAN is
restricted from initiating traffic to the inside
VLAN.
Up to three active VLANs, one of which must be
used for failover.
Up to three active VLANs for normal traffic.
One active VLAN for failover.
One active VLAN as a backup link to your ISP.
The backup interface does not send or receive
traffic unless the route through the primary
interface fails.
Planning a VLAN Configuration
78-18003-02