topic communication between PiX internal interface in Network Security

communication between PiX internal interface

ciscotech4u — Mon, 11 Mar 2019 11:05:20 GMT

hi,

i am using a Pix firewall for hiding my two internal networks( for ex network A and B) connected to seperate interfaces of the PIX firewall.

a) i installed one windows server on

network A , and it's working properly for Network A users.

b) i want to share this windows server for users in Network B. i am not able to achieve this , perhaps i have to open PiX firewall as Network A & B are on two seperate interface.

Please guide me for a sample cisco config Or suggest.

Thanks,mahesh.

Re: communication between PiX internal interface

Jon Marshall — Sun, 02 Sep 2007 15:48:47 GMT

Hi Mahesh

What version of Pix are you running ?

What security levels do each of the interfaces have ?

Jon

Re: communication between PiX internal interface

ciscotech4u — Sun, 02 Sep 2007 15:53:47 GMT

dear jon,

it's 7.1 and pix configured as basic firewall ( no VPN ) , so the question is how to open one interface for another in a pix firewall.

rgds,mahesh.

Re: communication between PiX internal interface

Jon Marshall — Sun, 02 Sep 2007 16:56:04 GMT

Mahesh

You can do this one of 2 ways.

1) If the 2 interfaces are the same security level you can use the following command

"same-security-traffic permit inter-interface"

if you do this traffic an flow freely between the 2 interfaces without any access-lists or NAT.

2) If you would rather control traffic. It all depends on which interface has a higher security level.

Can you post the security levels for the 2 interfaces. You can get these from a "sh run"

Jon

Re: communication between PiX internal interface

ciscotech4u — Sun, 02 Sep 2007 17:30:22 GMT

dear Jon,

Appriciate your help.

your question on security level help me to fix the problem and i got a sample config

showing the config from low security zone to

high security zone.

Tks,mahesh

Re: communication between PiX internal interface

mkkeyan — Tue, 04 Sep 2007 08:36:43 GMT

can post sample Config here, more or less iam in the same situation .

Tks

karthik