Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Due to some rapid changes I need to also provide vlan(s) in a new location. The topology looks like this:

(main location, vlans:id=6(workstations),id=8(phones))
 (new location vlans:id=6,8)

I would like to secure connection between my_switch01 (hp4108GL) and my_switch02 (3com 3824). First I considered buying two ASA5505-BUN-K9 devices, but I believe they would be more useful for securely connecting two networks site-to-site (more like secure L3 connection). They have a 'transparent firewall mode' but after some reading I'm still not sure if it is possible.

Is it possible to use two ASA5505-BUN-K9 for securing connection between two switches, I call it vlan-to-vlan?

share|improve this question
@user79720, please be specific about the security requirements (authentication, encryption, etc...) and why. – Mike Pennington Apr 23 '11 at 11:40

You can use them as L2 firewalls but, given a choice, it would be far better to not stretch the subnets across then you can route or not, using a L3 firewall if that is required, depending on your requirements.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.