topic Re: Multiple Pix in Network Security

Multiple Pix

t.mazyck — Fri, 21 Feb 2020 06:46:02 GMT

I have two pair of Pix 535's, because I ran out of DMZ (10) on one of them. Now that I have the eleven dmz, how should I configure the two 535 to route between dmz 1-10 and 11-20.

Re: Multiple Pix

mhoda — Tue, 27 May 2003 16:00:00 GMT

Hi,

Can you let us know how those 2 pixes are connected with each other ? Thanks,

Mynul

Re: Multiple Pix

ywadhavk — Tue, 27 May 2003 16:11:29 GMT

Need to understand your network topology for any indications on how to route. The main obstacle would be putting in place a proper network addressing scheme. You could look into the OSPF implementation feature in 6.3 version for gettng some routing going on in the PIX.

Other than that, static routes are the only way and this is where the proper network addressing scheme comes into play.

This is the only thing I can guess based on the broad question.

Thanks.

Yatin

Re: Multiple Pix

t.mazyck — Tue, 27 May 2003 17:18:20 GMT

No... I have two firewall A and B ... Both have DMZ attached to each of them and I would like to be able to connect Firewall A DMZs to Firewall B DMZs. How should I do this ... (cross over cable between A and B, Shared DMZ segement, Firewall C with a connection between both, or use a Router between both)... What is the preferred method ... (will they all work ?)

Re: Multiple Pix

mhoda — Tue, 27 May 2003 23:59:43 GMT

Hi,

If the requirement is only that dmzs on both PIXes should be able to communicate with each other, then connect 2 PIXes dmz interfaces with a cross over cable and then with the help of static or dynamic routing protocol, make your dmzs net available with each other . So, the answer is yes, it is possible.

If you have any other question, plesae let us know. Thanks,

Mynul