topic Re: VLAN-based virtual interfaces With PIX 515e in Network Security

VLAN-based virtual interfaces With PIX 515e

sharris — Fri, 21 Feb 2020 08:19:15 GMT

I am looking for configuration examples on setting up VLAN-based virtual interfaces with a PIX 506e and a 2950 switch.

I need a DMZ on this PIX, and noticed this option.

HAs anyone set this up before?

lubo.nistor — Tue, 09 Aug 2005 13:51:31 GMT

well i did that on 515, it works but you only gain 2 more ifaces..

that is if you have 5 physical you can have max 3 virtual.

examples are on this website (at least i've found it here).

which OS do you have on Pix?

sharris — Tue, 09 Aug 2005 14:31:08 GMT

6.3

I couldn't find anything here. A lot on VLAN's but not configurating the PIX using the Virtual VLANS

minoc — Tue, 16 Aug 2005 17:40:30 GMT

Hello,

Here are is an example on how to do this in version 6.3.4:

interface ethernet1 vlan18 logical ---> map physical if to virtual if

nameif vlan18 web-host security70 ---> asign name to virtual if, include security level

ip address web-host 192.168.150.1 255.255.255.0 ---> asign IP address to virtual if

Remember the port connected in the switch for the PIX must be setup as trunk port.

Regards,

Carlos Roque

sohaildxbfze — Mon, 26 Apr 2010 08:13:17 GMT

Hi there,

will each vlan in pix 515 will support its own dhcpd service

Jennifer Halim — Mon, 26 Apr 2010 11:20:32 GMT

Yes, you can configure each PIX interface with dhcpd service. The dhcpd configuration is normaly per interface.

Here is the command reference: