asa and vlans

trackit

Hi!

Can anyone tell me how asa handles vlans? If i connect switchport trunk to asa's interface.. will it understand the dot1q protocol? afaik on ASA i can associate only subinterfaces with vlans, not physical interfaces? right? So do i have to create subinterface to every vlan? is that the correct way to do it?

thanks

Ahriakin

The physical interface, if configured, will use the trunk native vlan afair, so it's always best practice to use subs (since you will have to anyway for any real vlan structure) and make sure there is nothing on the physical ('no nameif' if you have a previous config)