Multiples DMZs on ASA 5520 connecting to a Catalyst 3550

[thomuff]

I have ASA 5520 with 4 ports, I have 8 DMZ networks. As anyone configure a ASA 5520 for use with VLANs or subinterfaces? How do you do it?

I plan on using sub-interfaces on the DMZ interface and assign a vlan to each sub interface. Will I have to configure dot1q trunking on the DMZ interface. If not, will I have to configure it on the switchport of my DMZ switch? or does each subinterface ***Just Thinking out loud*****

Thanks

[sebastan_bach · Accepted solution]

hi there on the physical interface first of all u will have no config except for no shut and get the interface up.then create sub-interfaces on the same interface like int e0.1 . set the security-level and assign them to a vlan and configure ip-address to them.after doing that connect the port to a switchport and configure the port as a trucnking port cause all the vlan traffic from the asa is going to flow from this port.on the switch connect ur servers and assign the port to their respective vlans and configure thie gateways as the interface ip address of the vlan configured on the asa. that's it. incase u need more clarifications . write back. if i solved ur problem then pls rate the post.

sebastan

[thomuff]

That was excellent. Thank you!