topic layered virtual firewall in Network Security

layered virtual firewall

superlubis — Mon, 11 Mar 2019 23:57:40 GMT

Hello,

I know cisco asa can do virtualization with virtual context.

My question is as far as i know if i create perhaps 3 virtual context web, app, and db logicaly it in the same layer, only 1 layer.

Can i create layered virtual context?. So if physically my asa interface only connect to 1 port switch but logically will look like this :

Firewall

|||||

Web context

|||||

App Context

|||||

Db context

Luis Silva Benavides — Thu, 27 Sep 2012 14:14:02 GMT

Ibrahim,

Yes you can share the same phusical interface with between context. You actually have 2 options:

1. create subinterfaces and assign a different subinterface to each context.

2. Assign the physical interace to the 3 contexts but "mac-address auto" must be enable to avoid packet classyfication issues.

Luis

superlubis — Thu, 11 Oct 2012 07:56:58 GMT

Yes i already know about virtual context or sub interface. When i do virtual context or sub interface, the topology will be like this :

Firewall

|| || ||

Contex1 Contex2 Contex3

Btw:another question can i do vrf lite from core switch to firewall/virtual context?

what i want is, this is not my req just an idea.

Firewall

Contex1

Contex2

Contex3