Cisco ASA 5505

3-7
ASA 5505 Getting Started Guide
78-18003-02
Chapter 3 Planning a VLAN Configuration
Deployment Scenarios Using VLANs
DMZ Deployment
The only deployments that require three VLANs are those in which there is a
DMZ to protect as well as the Inside network. If you have a DMZ in your
configuration, the DMZ must be on its own VLAN.
Figure 3-3 Deployment Requiring Three VLANs
In this example, three physical switch ports are allocated to the Inside VLAN, two
switch ports are allocated to the DMZ VLAN, and one switch port is allocated to
the Outside VLAN. Two switch ports are left unused.
190926
Web Server
Email Server
Adaptive Security
Appliance
Private (Inside) Network
Cisco ASA SSC-05
St
atu
s
S
ecurity
Services
Card Slot
1
2
c
o
n
s
o
l
e
R
E
S
E
T
P
O
W
E
R
4
8
V
D
C
7
P
O
W
E
R
o
v
e
r
E
T
H
E
R
N
E
T
6
5
4
3
2
1
0
Internet
ISP
Router
DMZ
Outside Network
(Internet Connection)
Personal computers
Printer