ASA 5505 Setup

[Mokhalil82]

Hi

I have a asa 5505 with base license and it is  pre 8.0 version so uses the old commands. On show version it shows it supports 3 vlans and no trunks

Q1) Can I use any vlan number for the vlans, for example I want to use vlan 2 for outside but can I use vlan 50 for inside and then on the internal layer 3 switch have a vlan interface 50 and use the link as an access link. Will there be issues in regards to the native vlan

Q2) I simply want the traffic to pass without being natted as the firewall connects to a gateway router and the subnet between the router and the firewall is an internal range. What nat statement is required to keep the ips the same

With Q2 I want to know is it better to nat to the ip on the outside interface then on the router nat the router inside subnet to the external ip OR is is better to insert a statement to say keep the IPs the same

Q3)As traffic is going from a higher to lower security zone, I take it no access-lists are required

Thanks

[Reza Sharifi · Accepted solution]

Hi,

Can you provide a diagram of your network so we can better understand your topology and where Internet is connected?

I have not used 5505 before, but I think with 3 vlan limitation you can only configure 2,3 and 4.

You can find out by using:

interface vlan ?

this should tell you the supported range.

HTH

[Mokhalil82]

Thanks Reza

Ive managed to lab it and got it working using vlan 95 and setting the uplink as an access port. It lets me use 3 vlans but the vlan numbers can be any

Thanks for your help

[Reza Sharifi]

Good to  know

Thanks for the feedback and rating!.

Reza