5505 licensing and VLANs...awful

[slug420]

so I look up ASA5505 licensing and for VLAN support see:

3 (no trunking support)/20 (with trunking support)*

I need 3 VLANs...inside, outside, and DMZ..but when it is creating the third (DMZ) it says I am only allowed to have 2 VLANs and can only create the third if its set to not forward traffic...wtf?

This is a 5505 with the unlimited user license...

[Jennifer Halim]

For the third interface, or one of the interface, you can configure not to forward traffic to one of the other interface.

Example:

1) Inside interface can forward to DMZ and Outside

2) Outside interface can forward to Inside and DMZ

3) DMZ can only forward to one of the other interface, ie: either inside or outside (typically, with Base license, people configure DMZ not to be able to forward to the inside zone, and have access to the Outside).