ASA 5505 Vlan Config

[jwood1650]

I have IOS 8.0(4) and the base 50 User License...will this config work?  I have two networks; my home network, and my lab.  I want to split my Internet connection between them, but keep the networks separate for the most part.  Will my license allow this config since I can't do DMZ?

interface Ethernet0/0

switchport access vlan 3

!

interface Ethernet0/1

switchport access vlan 1

!

interface Ethernet0/2

switchport access vlan 2

!

interface Ethernet0/3

shutdown

!

interface Ethernet0/4

shutdown

!

interface Ethernet0/5

shutdown

!

interface Ethernet0/6

shutdown

!

interface Ethernet0/7

shutdown

!

interface Vlan1

nameif inside

security-level 100

ip address 10.0.10.1 255.255.255.252

!

interface Vlan2

nameif lab

security-level 100

ip address 10.0.20.1 255.255.255.252

!

interface Vlan3

nameif outside

security-level 0

ip address 24.234.XXX.XXX 255.255.255.224

[Julio Carvajal · Accepted solution]

Hello Jonathan,

Whether you have a base license or security plus we can make this work

The only difference is that with the base you can only have 3 vlans ( the ones you need.) but the third one will be restricted.

with that I mean that you will not be able to go from that vlan to the other 2.. Just to one.. In this case it fits as you will go to the internet from the Lab only

With the plus license you have unrestricted amount of vlans and you can go wherever you want between those interfaces

Remember to rate all of the helpful posts ( To rate a post just hit the stars at the left side of a comment, 5 being great. 1 being bad)

Regards