B-34
Cisco Security Appliance Command Line Configuration Guide
OL-10088-01
Appendix B Sample Configurations
Example 14: ASA 5505 Base License
! routing table when the tracked route is removed.
Example 14: ASA 5505 Base License
This configuration creates three VLANs: inside (business), outside (Internet), and home (see
Figure B-13). Both the home and inside VLANs can access the outside, but the home VLAN cannot
access the inside VLAN. The inside VLAN can access the home VLAN so both VLANs can share a
printer. Because the outside IP address is set using DHCP, the inside and home VLANs use interface PAT
when accessing the Internet.
Figure B-13 Example 13
passwd g00fba11
enable password gen1u$
hostname Buster
asdm image disk0:/asdm.bin
boot system disk0:/image.bin
interface vlan 2
nameif outside
security-level 0
ip address dhcp setroute
no shutdown
interface vlan 1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
no shutdown
interface vlan 3
! This interface cannot communicate with the inside interface. This is required using
! the Base license
no forward interface vlan 1
nameif home
security-level 50
ip address 192.168.2.1 255.255.255.0
no shutdown
interface ethernet 0/0
ASA 5505
with Base License
VLAN 1
Inside
192.168.1.1/24
VLAN 2
Outside
(IP via DHCP)
Internet
VLAN 3
Home
192.168.2.1/24
Host
Printer
Video Game
Host Host IP Phone IP Phone
IP IP
153835