Solved

Can I trunk a Cisco PIX/ASA 5505 WITH BASE LICENSE?

Posted on 2011-03-23
5
1,042 Views
Last Modified: 2012-05-11
Hi
Can you please tell me if I can trunk an PIX/ASA 5505 BASE?
or I need to have the security plus bundle?

Please advise.
0
Comment
Question by:chenzovicc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 35205214
Not quite:
The basic license allows only 3 active VLANs which you can use as Inside, Outside and DMZ. However, there is a restriction here that many people do not know about: The DMZ VLAN can access ONLY the Outside VLAN but can not access the Inside VLAN. The other two VLANs (Inside and Outside) can access all the other VLANs with no problems.

You'll need a security plus license for that (and have to pay :-~ ):
The Security Plus license, removes all limitations and allows up to 20 active VLANs to be configured. Since there are only 8 physical ports, you can create several vlan subinterfaces on each physical port to segment your network into different security zones (e.g Inside, Outside, DMZ1, DMZ2, Sales, Engineering etc).

Source: http://www.networkstraining.com/cisco-asa-5505-vlans-and-licensing/
0
 

Author Comment

by:chenzovicc
ID: 35208328
This is the scenario I need to accomplish and in reality I do not need the 192.168.1.0 and 172.168.1.0
to talk to each other as long as they have access to the outside world. I will create access-list
so users from the outside will have access to the exchange server on each server.
I know of the limitation of the base license what I do not know is if the base license will allow me
to trunk with my cisco switch 2960.

Please advise.
NetDiagram.jpg
0
 
LVL 35

Accepted Solution

by:
Ernie Beek earned 500 total points
ID: 35208383
Sorry, can be very fast with my answer: no trunk ports with the base license :-~

I know, I was trying it my self the other day...........
0
 

Author Closing Comment

by:chenzovicc
ID: 35209891
Thanks
0
 
LVL 35

Expert Comment

by:Ernie Beek
ID: 35211422
You're welcome. Sorry it wasn't the answer you were hoping for.
Thx for the points :)
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Layer 3 switch recommendation 15 98
How can I tell if drop outs to server are due to network or a bottle neck? 3 80
Site to Site VPN DNS issue 6 38
Cisco Nexus 5 57
Overview The Cisco PIX 501, PIX 506e, ASA 5505 and ASA 5510 (most if not all of this information will be relevant to the PIX 515e but I do not have a working configuration handy to verify the validity) are primarily used within small to medium busi…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question