##Configure DMZ VLAN 3, Assign IP address 192.168.2.1/24,  name it dmz,  security level of 70

CCNAS-ASA(config)# interface vlan 3 
CCNAS-ASA(config-if)# ip address 192.168.2.1 255.255.255.0 
CCNAS-ASA(config-if)# nameif dmz 
ERROR: This license does not allow configuring more than 2 interfaces with nameif and without a "no forward" 
command on this interface or on 1 interface(s) with nameif already configured.

CCNAS-ASA(config-if)# no forward interface vlan 1 
CCNAS-ASA(config-if)# nameif dmz INFO: Security level for "dmz" set to 0 by default. 
CCNAS-ASA(config-if)# security-level 70 
CCNAS-ASA(config-if)# no shut

CCNAS-ASA # show interface ip brief 
CCNAS-ASA # show ip address 
CCNAS-ASA(config)# show switch vlan


##Configure an ACL to allow access to the DMZ server from the Internet
CCNAS-ASA(config)# access-list OUTSIDE-DMZ permit ip any host 192.168.2.3 
CCNAS-ASA(config)# access-group OUTSIDE-DMZ in interface outside

##Configure an ACL to allow access to the DMZ server from the Internet
CCNAS-ASA(config)# access-list OUTSIDE-DMZ permit ip any host 192.168.2.3 
CCNAS-ASA(config)# access-group OUTSIDE-DMZ in interface outside