topic Re: Multiple virtual interfaces on PIX-525 ?????? in Network Security

Multiple virtual interfaces on PIX-525 ??????

afzaalq007 — Mon, 11 Mar 2019 09:17:38 GMT

i want to config a pix 525. i have some problem. and wat to discuss here regarding my scanrio..

I Have Pix 525 avialable with 2 physical interfaces. where as i need 4 interfces.

how can i do it 2 interfces are there i need 2 more for my scanrio.....

One is DMZ ???

and other is For mangnet ???

plz provode me sample config

Thanks and regards

Jon Marshall — Wed, 10 Jan 2007 09:31:28 GMT

You can use logical interfaces on the Pix 525. Here is an excerpt from one of our production Pix firewalls

interface ethernet0 100full

interface ethernet1 100full

interface ethernet1 vlan191 physical

interface ethernet1 vlan171 logical

interface ethernet1 vlan190 logical

interface ethernet2 100full

nameif ethernet0 outside security0

nameif ethernet1 inside security100

nameif ethernet2 state-fail security10

nameif vlan171 app-layer-inside security95

nameif vlan190 oracle-dev security90

Once you have created the virtual interfaces you then treat them as you would physical interfaces in terms of NAT and access-lists.

Whichever physical interfaces you use will need to be setup as a trunk on the switch end.

HTH

afzaalq007 — Wed, 10 Jan 2007 10:31:54 GMT

Thanks for the Ans ...

can u provide me some references link for more detail

Thanks and regard

Jon Marshall — Wed, 10 Jan 2007 11:01:28 GMT

here is a link for Pix ver 6.3.

HTH