# Cisco ASA Security Levels

**URL:** <https://forum.networklessons.com/t/cisco-asa-security-levels/812>\
**Category:** Lessons Discussion\
**Created:** [December 19, 2016, 4:08pm UTC](https://forum.networklessons.com/t/cisco-asa-security-levels/812 "2016-12-19T16:08:34Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\
**Post date:** [January 7, 2016, 11:40am UTC](https://forum.networklessons.com/t/cisco-asa-security-levels/812/6 "2016-01-07T11:40:32Z")

</div>

Hi Juan,

The main difference between the 5505 and the 5510 or higher is that the 5505 has switchports and VLAN interfaces. The 5510 only has L3 interfaces.

Configuration is similar to a L3 switch, here’s an example for an INSIDE and OUTSIDE:

```auto
ASA(config)# interface vlan 100
 ASA(config-if)# nameif OUTSIDE
 ASA(config-if)# security-level 0
 ASA(config-if)# ip address 192.168.1.254 255.255.255.0
 ASA(config-if)# no shutdown

 ASA(config-if)# interface vlan 200
 ASA(config-if)# nameif INSIDE
 ASA(config-if)# security-level 100
 ASA(config-if)# ip address 192.168.2.254 255.255.255.0
 ASA(config-if)# no shutdown

 ASA(config)# interface ethernet 0/0
 ASA(config-if)# switchport access vlan 100
 ASA(config-if)# no shutdown

 ASA(config-if)# interface ethernet 0/1
 ASA(config-if)# switchport access vlan 200
 ASA(config-if)# no shutdown

```

The 5505 is the last ASA that uses these switchports and VLAN interfaces, the 5506 has 8x L3 interfaces.

Hope this helps!

Rene

---

_[View the full topic](https://forum.networklessons.com/t/cisco-asa-security-levels/812)._