I'm tring to setup a DMZ for a guest wireless off of a 5505.
So this device has a base license. It has vlan1 and vlan 2 for inside and outside.
Another vlan is configured to be a failover for the currently active wan connection. It is using the "no forward interface" command.
Can I add another vlan as a DMZ if I use the "no forward interface" command?
I see the following in Cisco Documentation:
"If you already have two VLAN interfaces configured with a
nameif
command, be sure to enter the
no forward interface
command before the
nameif
command on the third interface; the adaptive security appliance does not allow three fully functioning VLAN interfaces with the Base license on the ASA 5505 adaptive security appliance."
This is what is currently configured:
interface Vlan1
nameif inside
security-level 100
allow-ssc-mgmt
ip address 192.168.10.1 255.255.255.0
!
interface Vlan2
nameif outside
security-level 0
ip address
!
interface Vlan12
no forward interface Vlan2
nameif failover
security-level 0
ip address
I'd like to add the following:
interface vlan3
nameif guestdmz
no forward interface Vlan1
secuirty level 100
ip address 192.168.1.0 255.255.255.0
