Cisco.ASA.- VLAN on outside interface

[Jay_2]

Hi,

A quick question, why is a vlan created on the outside interface rather than the settings and security level assigned directly to the interface?

 

[thrash408]

What version and what model do you have? Are you talking about the 5505?

 

[MysticRyuujin]

I don't know. Why did you or your organization create a sub-interface?

If your outside interface needs to support more than one VLAN then you have to create sub-interfaces for those VLANs and apply policies to them...Maybe you want TCP port 80 allowed through on one VLAN but not on the other...

The question "why" can only be answered by knowing your setup and your requirements. If you figure those out you'll figure out why...

 

[tangoseal]

I don't know.

You said enough by ending there.

 

[Jay_2]

Yes 5505, I see lots of boiler plate configs this way and was just wondering why.

You said enough by ending there.

Thanks for your help.

 

[Jay_2]

I have looked into this a bit more and the only reason I can see that this is done is so you can easily move the config of the interface to another interface.