ASA 5506 2nd VLAN

[Jack-ITP]

What's the best way to crate a second VLAN on a 5506? Client has a 10.1.1.x subnet setup on interface 1/2 (inside) with interface 1/1 (outside) holding the public IP. Now they have a second domain on a 10.10.10.x subnet that will need internet access through the ASA but no routing between the 2 subnets (it is entirely segmented from the original network - just using the same ASA for outside access). Can I simply set up a 10.10.10.1 IP on an unused interface or do I need a statement allowing that traffic through? Thanks.

Jack

[Flavio Miranda]

Hi @Jack-ITP

For internet access only you need to add the new network and then create a NAT statement through outside interface. If something on the internet needs to access something on this network then you need ACL.

-If I helped you somehow, please, rate it as useful.-