Yes, VDSL lines with fixed IP are provided with managed service (Belgacom)...  However, it is possible to ask them to disable the firewall. No, the 2 lines will probably have different bandwith (we don't have chosen the second ISP yet). ... View more

I'm going to refine my question : - the ISPs will provide a local (10.x.x.x) for the frist ISP and a official (unknown at this time) for the second ISP at the end of their router. - I want to load-balance all the outgoing traffic (if possible), whatever the destination is - I also need to know how the ingoing access (for remote management) will be done (which official IP should I use - or both ?) - How will the vrtual IP be defined (internal and external) ? - What is the overall schema ?    WAN -> ISP router -> ASA -> Switch ?  With cross-links betwwen ASA and switches ? Sorry for all these questions, but I'm a noob in this domain... ... View more

I will check the bandwith requirements for each type of VLAN and by type of traffic. VRF seems difficult to implement (for me), and there is no extension of the offices planned in the mid-term. But I have now another question. Is it possible to implement load-balancing over 2 ISP, using 2 ASA ? Remarks : - the routers are provided by the ISP (we therefore don't have any management access on them) - VPN is not needed - which model (and options) of ASA are required ? Thanks for your help. ... View more

Thanks a lot, I have now all informations I need about the HW !! ... View more

Thanks for your answer, I see now clearly what I need for ASA and WiFi. To finalize, I just need now : 1) Confirmation for the use of 300-series. 2) Confirmation about the use of W2K8 server as DCHP for 15 VLAN (how can the server know which VLAN is asking for an IP ?). ... View more

Thanks for all your comments, it really help for my design. However... I still not have a clear view of the components I need. I provide a summary below, please help me to validate (or not) and answer tyhe remaining questions. 1) Firewall ASA 5505 (are the ref. numbers correct ?) with ability to manage 15 VLAN : - ASA 5505 – 50 users : ASA5505-50-BUN-K9 - Security Plus licence : L-ASA5505-SEC-PL 2) Would a 300 Series switch be suitable for this use (VLAN + DHCP relay) ?  It is less cheaper than 3560. I think about : SRW248G4P-K9-EU Would you please confirm ? 3) Aironet 2600 (is the ref. numbers correct ?), WPA2 would provide sufficient security at this time : - AIR-CAP2602-E-K9 4) What is the need of the controller ? - Does it provide easyer VLAN management ? - Does it has a specific GUI that the Aironet does not have ? - Is it needed if there is only 1 Aironet ?  And 2 ? 5) As the ASA does not provide sufficient DCHP capabilities, I will use a DCHP server. But my question is : can a W2K8 server provide DCHP over 15 VLAN, using the configuration described above ? ... View more

1) The Sec Plus licence is needed to have more than 5 VLAN (up to 15 needed). 2) DHCP is supposed to be provided by the ASA 5505.  Can it (or not) act as DCHP server for each VLAN ? 3) The basic ID was to have a SSID for each VLAN, with WPA2 encryption. 4) Which type of controller is required with this Aironet ? ... View more

Hello, Thanks for all these answers. To be sure to avoid any mistake, I would like to summarize the best (and simplest) solution for this design (therefore, without VRF if it is not required). 1) Firewall ASA 5505 (are the ref. numbers correct ?) : - ASA 5505 – 50 users : ASA5505-50-BUN-K9 - Security Plus licence : L-ASA5505-SEC-PL 2) Would a 300 Series switch be suitable for this use ?  It is less cheaper than 3560. I think about : SRW248G4P-K9-EU Would you please confirm ? 3) Aironet 2600 (is the ref. numbers correct ?) : - AIR-CAP2602-E-K9 Thanks in advance for your comments. ... View more