I have a Cisco ASA 5520 that I recently acquired from work that I am planning to use as my home router. I also have a Linksys E4200 router and a Linksys WRT610N router, both dual-band, that I would be turning into access points. I also have a 3rd 5Ghz-only N access point lying around.
I am planning on dividing my home network/home lab into Vlans/subnets like so:
- Vlan 10 - DMZ zone
- wireless clients, iPads
- Vlan 20 - Servers
- NAS devices, ESX servers, security systems
- Vlan 100 - Management zone
- management IPs for Cisco switches, ASA, etc.
My current plan is to have GigabitEthernet0/0 on the ASA connect to my Internet connection and grab an address via DHCP. All the rest of the ports will connect to a Cisco Catalyst 2960G switch where I will configure all of the VLANs for each port.
My main concern is having things like Vonage (SIP), FaceTime (on iPhones and iPads), and other media-related things such as TiVo/Bluray Player/gaming systems/etc able to open ports as needed via UPnP. As a result, my first idea was to have all incoming traffic by default sent to a Linksys Router which handles DHCP/UPnP/etc for Vlan 10. Most devices would connect to that in order to get out to the Internet, while at the same time having to pass traffic through the ASA for access to more "privileged" resources.
Is this possible? Do I need to setup a mixed-context (transparent/routing) environment in order to accomplish this?