topic Re: PIX at layer 2 only? in Network Security

PIX at layer 2 only?

kirkster — Fri, 21 Feb 2020 08:02:32 GMT

Hi,

I think the answer is no but cannot find any conclusive statements on cco. Is it possible for a PIX to operate with two of it's ethernet interfaces within the same subnet and still do its firewall function in a briding mode? I think not since how would the box know how to forward the packets? Also, you cannot address two interfaces within the same subnet (unless there is a trick I know nothing of!)

I have a customer who has a network of about 200 odd hosts who wants to seperate them and only allow communication according to specific rules between two departments of 100 hosts each. They don't want to re-address the segments. I can see no solution if they want to use PIX other than readdressing.

Thanks, Steve

Re: PIX at layer 2 only?

fedrodri — Tue, 29 Mar 2005 09:02:15 GMT

Hi, Steve

I believe PIX OS version 7.0 (to be out on CCO pretty soon, perhaps this week!) would be able to do L2 Transparent Firewalling.

Thanks,

Federico Rodriguez

Re: PIX at layer 2 only?

kirkster — Tue, 29 Mar 2005 12:07:10 GMT

Thanks!! Yes, looking at the release notes for 7.0 it says that the PIX can act as a transparent firewall at layer 2. I had looked everyhwere for this until I knew about release 7.0 !!!

Thanks Federico!

Steve

Re: PIX at layer 2 only?

dilan — Tue, 29 Mar 2005 12:11:44 GMT

I think ver 7 of PIX OS supports the transparent feature.

Regards

Dilan