Cisco ASA 5505

Chapter 3 Planning a VLAN Configuration
Deployment Scenarios Using VLANs
3-4
ASA 5505 Getting Started Guide
78-18003-02
Table 3-1 License Restrictions on Active VLANs
Note The ASA 5505 adaptive security appliance supports active and standby failover,
but not Stateful Failover.
Deployment Scenarios Using VLANs
The number of VLANs you need depends on the complexity of the network into
which you are installing the adaptive security appliance. Use the scenarios in this
section as a guide to help you determine how many VLANs you need and how
many ports to allocate to each.
This section includes the following topics:
• Basic Deployment Using Two VLANs, page 3-5
• DMZ Deployment, page 3-7
• Teleworker Deployment Using Three VLANs, page 3-8
License Type Mode Connections
Base Platform
Transparent Mode Up to two active VLANs.
Routed Mode Up to three active VLANs. The DMZ VLAN is
restricted from initiating traffic to the inside
VLAN.
Security Plus
License
Transparent Mode Up to three active VLANs, one of which must be
used for failover.
Routed Mode Up to three active VLANs for normal traffic.
One active VLAN for failover.
One active VLAN as a backup link to your ISP.
The backup interface does not send or receive
traffic unless the route through the primary
interface fails.