topic Re: config of Vlan on Pix in Network Security

config of Vlan on Pix

lformelli — Fri, 21 Feb 2020 08:28:50 GMT

If I have an a Pix that support vlan can working fine this configuration with two subnet that have surf on internet with PAT ?

thanks

Lorenzo

interface ethernet0 auto

interface ethernet1 100full

interface ethernet1 vlan2 physical

interface ethernet1 vlan3 logical

nameif ethernet0 outside security0

nameif ethernet1 inside security100

nameif vlan3 dmz security 80

ip address outside "public address"

ip address inside 192.168.12.254 255.255.255.0

ip address dmz 192.168.20.1 255.255.255.0

global (outside) 1 interface

nat (inside) 1 192.168.12.0 255.255.255.0 0 0

nat (dmz) 1 192.168.20.0 255.255.255.0 0 0

arunsing — Fri, 21 Oct 2005 09:38:47 GMT

Hi,

I am sorry I could not understand your question.

lformelli — Fri, 21 Oct 2005 10:06:34 GMT

Hi,

simply I have an a Pix that support vlan.

I have two vlan on inside interface connected with trunk .

I need two allow for both subnet surf on Internet.

Can this configuration working fine ?

thanks

Lorenzo

mgaysek — Mon, 24 Oct 2005 13:00:56 GMT

Yes. Treat them like separate interfaces and create NATs for both.