ASA 5510 Vlan

[Navaz Wattoo]

i have two cisco asa 5510 firewall and at failover and i have one server in dmz zone

and now i want more servers in dmz zone with one asa dmz interface

is ther any solution regarding this?

Navaz       

[Marius Gunnerud]

I am not 100% sure I understand what you are wanting to do.  Do these servers need to be in different VLANs?  If so you can configure the physical interface into subinterfaces and then assign each seperate subinterface to a VLAN.  On the switch that connects to the ASA you would need to trunk the port and make sure you allow all required VLANs over that trunk.

Here is an example of how you would configure the interface on the ASA.

int g0/1

no shut

int g0/1.101

security-level 50

nameif DMZ1

IP 192.168.6.1 255.255.255.0

vlan 101

--
Please remember to rate and select a correct answer

[lcambron]

Hello,

I guess your question is if this can be done without a switch? Not really.

You can further explain the problem so we can help.

If you need the servers on the same Vlan/network, you can just connect a switch to the DMZ interface and connect the servers to the Switch, all on the same Vlan.

Otherwise you can follow Marius's suggestion.

Regards,

Felipe.

Remember to rate useful posts.

[Navaz Wattoo]

        Here is my topolgy

Navaz

Message was edited by: Navaz Wattoo

[Navaz Wattoo]

i want that one dmz interface and connected with ciscl L2  2960 switch and having 3 or more servers connected

Navaz

[lcambron · Accepted solution]

Then you just need to configure the ports on the switch as access and on the same Vlan, just like the port you have now configured for the working server.

Let us know if you have questions or any issue.

Regards,

Felipe.

Remember to rate useful posts.

[Navaz Wattoo]

Send me the vlan configuration of cisco ASA and also 2960

Navaz

[Navaz Wattoo]

anyone have solution

Navaz