I'm confused as to how the asa handles vlans. Currently we're running a 5520 with 4 physical ports.
1 inet 1 backup inet 1 internal 1 dmz
We are in a position where we need to further segment the network. Instead of buying a new asa with more physical ports we're just going to break it out by vlan.
From what I've seen the only way to do this is with sub-interfaces. That works great if all my traffic comes in over 1 physical port but that's not how it will be. We'll have hosts from multiple vlans, connected to 2 different core switches each with an uplink to the asa.
Long story short, if I create vlan 200, 300, 400, and 500 on sub-interfaces under physical interface g0/1 then how do I deal with hosts in those vlans that will come in on say g0/2 ?
Or do I just have to rearrange things physically so this is all aggregated through another switch and it all hits the asa in a single physical uplink.
Hope that makes sense.