About the Author

author photo

Joe Harris, CCIE No. 6200 (R&S, Security & SP) is a Systems Engineer with Cisco Systems® specializing in Security. In addition to authoring Cisco Network Security Little Black Book, Joe has also been a technical reviewer for several Cisco Press publications and written articles, white papers, and presentations on various security technologies. He also assists various Certification Partners by beta testing their newest CCIE certification workbooks and has been recognized by Cisco as an SE Wall of Fame award winner.

See All Posts by This Author

VLAN Mapping on the ASA

January 30th, 2008 • Related • Filed Under

I get questions from customers and partners alike asking me what ASA VLAN mapping is and how to configure it because they either overheard someone discussing it or read about it somewhere…so I figured I would try and answer both questions here. The ASA VLAN mapping feature allows you to route your VPN traffic to a specific ASA VLAN interface based on the group-policy the remote access user belongs to. The VLAN is configured under ASA group-policy. This is the ASA VLAN configured under the ASA sub-interface, not the switch. Here is a simple VLAN mapping configuration example below that I hope clears it up:

So essentially a user that logins under the group policy ‘CCIE6200′ will now be put into VLAN 1919…

There Are 2 Responses So Far. »

  1. Gravatar

    Comment by Anna Armarchuk on 1 November 2008:

    This option of command is not existson ASA 7.1. What did you mean? Please, give me elucidation of the problem

    LabDemo-ASA5505(config)# group-policy ciscovpn attributes
    LabDemo-ASA5505(config-group-policy)# vl?
    ERROR: % Unrecognized command

  2. Gravatar

    Comment by Joe Harris on 3 November 2008:

    The ‘vlan’ option defined under the group policy was a 8.0 feature. You will need to upgrade to 8.0+ in order to use that command. Please see the following for additional details:

    VLAN Command Reference

    Release Notes

Post a Response