04-05-2010 04:43 PM - edited 03-06-2019 10:28 AM
Data VLAN 192.168.3.0
Voice VLAN 10.50.50.0
DHCP Server with both ranges is 192.168.3.201
Gateway Linksys: 192.168.3.254
Switch configuration: -
AP Configuration
The above is working well but I want to introduce an ASA and remove the Linksys, my ASA only has 3 VLAN's with the key I have, so VLAN 1, 2 and 3
So my question to the experts here is "how do I introduce it with my current config?"
Thanks for your time
Martyn
04-09-2010 06:09 AM
You actually only have 2.5 VLANs with the 5505. If you use the .5 vlan it has to restrict traffic flow to 1 of the vlans.
Also you can create additional vlans but you can not associate them with access-list or NATing.
You have a couple options.
1) You buy a 5510
2) you use the following setup
WAN = vlan 2 (default for asa5505 -- from memory)
LAN = vlan 1 (aslo default for asa5505 -- from memory)
VOIP = vlan 3 (you will create this)
When you create the VOIP vlan you will choose to restrict flow to VLAN 1 (LAN). If you have a call manager then you will need to place the call manager server in vlan 3 with the VOIP. When you need to access the call manager just plug into a vlan3 port or change a port to vlan 3 for a short period of time.
Cisco is currently donating money to the Haiti earthquake appeal for every rating so please consider rating all helpful posts.
04-09-2010 08:24 AM
If you have an ASA 5505 with base license, you have the INSIDE and OUTSIDE interfaces and a DMZ (with limited access to only another interface).
If you purchase a Security Plus license, then you will have 3 fully usable and routable interfaces on the 5505.
Federico.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide