DMZ on same physical port

Posted on 2014-12-15
Medium Priority
Last Modified: 2014-12-16
Hello, is it possible to create a DMZ but have all the physical connections on the same port as the "Inside" network on a Cisco ASA 5505? The reason I ask is I have a client who has 20 PC's and 2 servers. Currently the network goes internet -> Linksys router-> Gig switch (non-configurable) - PC's and Servers and it works fine.

But now we just acquired an ASA 5505 and since The issue with the Cisco ASA is it does not have Gig Ethernet but when I go to set up the DMZ in the Wizard, it wants to assign it to an unused physical port. I'd like to keep the servers connected to the gig switch for the speed. Therefore the network would like like:

      | Port 0 on ASA
  Inside & DMZ (Port 1)
Gig Switch
PC's & Servers
Question by:bhodge10
LVL 11

Expert Comment

ID: 40502499
It won't really work this way as is.
The limitation here is your switch. Since it's unmanaged and unconfigurable, you cannot assign VLANs to ports. Without that, the ASA will not be able to distinguish between LAN traffic and DMZ traffic if you configure VLANs on the ASA.
LVL 58

Expert Comment

by:Pete Long
ID: 40502640
Not on a 5505, if you had a 5510 or bigger this would be possible with sub interfaces, but thats not an option on the 5505 sorry.
LVL 57

Accepted Solution

giltjr earned 2000 total points
ID: 40502760
If the servers are accessed both internally and externally and you really need gig speed, I would not even create a DMZ.  Just do NAT or PAT for the servers.

Let the 20 PC's inside access the servers directly and anything on the Internet goes through the firewall and it filters the traffic.

Author Closing Comment

ID: 40503226
That's what I'm going to do. Just keep it simple and use NAT.

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
LinkedIn blogging is great for networking, building up an audience, and expanding your influence as well. However, if you want to achieve these results, you need to work really hard to make your post worth liking and sharing. Here are 4 tips that ca…
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…

587 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question