topic What's PIX 525 UR maximum interface? in Network Security

What's PIX 525 UR maximum interface?

limtohsoon — Fri, 21 Feb 2020 08:08:31 GMT

Hi Sir,

I have a PIX-525-UR-BUN. OS version is 6.2(2). It has two 4-port FE cards installed. The software presents me with only 8 configurable interfaces. May I know what's exactly the max interfaces supported on a PIX 525 UR?

According to PIX licensing (http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_data_sheet09186a00800b0d85.html), the max physical interfaces is 10. According to another note (http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/hig63/525.htm#wp1053116), "The PIX 525 Restricted Interface Options can have a maximum of six interfaces, and for the Unrestricted Interface Options, a maximum of eight interfaces".

Please clarify my doubt.

Thank you.

B.Rgds,

Lim TS

Re: What's PIX 525 UR maximum interface?

a.alekseev — Sun, 15 May 2005 18:23:05 GMT

You need upgrade PIXOS to 6.3 or 7.0

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_62/hig/525.htm

Re: What's PIX 525 UR maximum interface?

limtohsoon — Sun, 15 May 2005 19:06:08 GMT

Hi,

I already upgraded the OS to 6.3(4). "show version" shows:

Maximum Physical Interfaces: 8

Maximum Interfaces: 12

But the software still presents me with only 8 configurable interfaces (i.e Ethernet0 - Ethernet7).

Please advise.

Thank you.

B.Rgds,

Lim TS

Re: What's PIX 525 UR maximum interface?

a.alekseev — Sun, 15 May 2005 19:36:26 GMT

The PIX 525 Restricted Interface Options can have a maximum of six interfaces, and for the Unrestricted Interface Options, a maximum of eight interfaces.

So if you want to have more interfaces you have to use virtial interfaces.

PIX support 802.1q since 6.3

Re: What's PIX 525 UR maximum interface?

a.alekseev — Sun, 15 May 2005 19:46:49 GMT

I think maybe you can use those two unused interfaces if you configure 2 or more Security Contexts.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_70/config/contexts.htm

Re: What's PIX 525 UR maximum interface?

yongl — Mon, 16 May 2005 01:53:31 GMT

Hi Lim,

Refer to URL http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_70/config/specs.htm#wp1012343

The max interface for PIX 525 UR version 7.0(1) is 10.

I have upgraded my PIX 525 UR to version 7.0(1) and the 'show version' result is:

Licensed features for this platform:

Maximum Physical Interfaces : 10

Maximum VLANs : 100

Inside Hosts : Unlimited

Failover : Active/Active

VPN-DES : Enabled

VPN-3DES-AES : Enabled

Cut-through Proxy : Enabled

Guards : Enabled

URL Filtering : Enabled

Security Contexts : 2

GTP/GPRS : Disabled

VPN Peers : Unlimited

This platform has an Unrestricted (UR) license.

I think Cisco has increased the maximum interface for PIX 525 UR.

Re: What's PIX 525 UR maximum interface?

limtohsoon — Mon, 16 May 2005 14:26:47 GMT

Hi Yong,

Referring to PIX licensing (http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_data_sheet09186a00800b0d85.html), the Max Physical Interfaces for a PIX 525 UR is 10.

Another note that I read (http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/hig63/525.htm#wp1053116) says that a PIX 525 Unrestricted Interface Options can have a max of 8 interfaces.

I'm confused what's exactly the max number of interfaces that a PIX 525 UR supports. My PIX-525-UR-BUN is installed with 2 units 4-port FE cards; so a total of 10 physical interfaces. However, the software (version 6.2(2)) only gives me 8 configurable interfaces (i.e. ethernet0-ethernet7). Does this mean two interfaces can never be used?

Recently I'm testing some FWSM concepts in a lab environment. I have problem when two contexts' inside networks are on a shared VLAN segment facing the MSFC (the FWSM is configured in routed, multiple context mode). I'm quite sure this is due to the way FWSM classifier works. I'm still looking for solution. Will post a detailed description in this Forum shortly. Hope you can help.

Thank you.

B.Rgds,

Lim TS

Re: What's PIX 525 UR maximum interface?

yongl — Tue, 17 May 2005 02:02:02 GMT

Hi Lim,

Based on the 'show version' result from PIX 525UR 6.3(3) and 7.0(1), I assume that maximum interface for PIX525UR version 6.3 is 8 and for version 7.0 is 10.

Please confirm with Cisco.