topic PIX vlan in Network Security https://community.cisco.com/t5/network-security/pix-vlan/m-p/583938#M498482 <P>Is PIX able to do intervlan routing/subinterface?</P><P></P><P>i have a small setup..in order to save cost i would like to eliminate the use of a router and have a PIX instead</P><P></P><P>Internet</P><P>|</P><P>PIX</P><P>|</P><P>Layer2 Switch(with 3 vlans)</P><P></P><P>My objective is to do restrictions such as below</P><P></P><P>............VPN....InternetAccess....Server</P><P>vlan 2.....No........Yes...................Yes</P><P>vlan 3.....Yes........No...................Yes</P><P></P><P>how am i able to achieve this setup? Does a router ACL allow me to do that? or do i need a firewall</P><P></P> Fri, 21 Feb 2020 09:06:28 GMT J_Vansen_S 2020-02-21T09:06:28Z PIX vlan https://community.cisco.com/t5/network-security/pix-vlan/m-p/583938#M498482 <P>Is PIX able to do intervlan routing/subinterface?</P><P></P><P>i have a small setup..in order to save cost i would like to eliminate the use of a router and have a PIX instead</P><P></P><P>Internet</P><P>|</P><P>PIX</P><P>|</P><P>Layer2 Switch(with 3 vlans)</P><P></P><P>My objective is to do restrictions such as below</P><P></P><P>............VPN....InternetAccess....Server</P><P>vlan 2.....No........Yes...................Yes</P><P>vlan 3.....Yes........No...................Yes</P><P></P><P>how am i able to achieve this setup? Does a router ACL allow me to do that? or do i need a firewall</P><P></P> Fri, 21 Feb 2020 09:06:28 GMT https://community.cisco.com/t5/network-security/pix-vlan/m-p/583938#M498482 J_Vansen_S 2020-02-21T09:06:28Z Re: PIX vlan https://community.cisco.com/t5/network-security/pix-vlan/m-p/583939#M498483 <HTML><HEAD></HEAD><BODY><P>Yes .. you can configure what is called logical interfaces .. basically vlan interfaces which use the physical for InVlan routing .. the only think you need to make sure is configuring the switch port for that physical interface as a trunk allowing the vlans you want ..</P><P></P><P>this is a brief example ...</P><P></P><P>interface ethernet3 100full &lt;- physical interface </P><P>interface ethernet3 vlan10 logical </P><P>interface ethernet3 vlan125 logical</P><P></P><P></P><P>NOTE: the physical interface does not have an Ip address. The logical interfaces can be configured as any physical one.</P><P></P><P>I hope it helps .. please rate it if it does !!!</P><P></P><P></P><P></P><P></P></BODY></HTML> Fri, 11 Aug 2006 01:28:59 GMT https://community.cisco.com/t5/network-security/pix-vlan/m-p/583939#M498483 Fernando_Meza 2006-08-11T01:28:59Z