topic Pix security level 0 in Network Security

Pix security level 0

mathia5 — Fri, 21 Feb 2020 06:55:43 GMT

Are there any known issues with having 2 interfaces with security level 0???

thanks

Re: Pix security level 0

mostiguy — Mon, 11 Aug 2003 14:56:24 GMT

That is an unsupported configuration - whether it works or not, if you ever need to open a support case with the TAC, they can tell you you are out of luck

Re: Pix security level 0

tvanginneken — Mon, 11 Aug 2003 14:58:03 GMT

Hi,

In the command reference (v6.3) you can find this comment when you look at the 'nameif' command

"Interfaces with the same security level cannot communicate with each other. We recommend that every interface have a unique security level."

In the Cisco Press I read a few months ago, they said it was not a TAC supported config.

Kind Regards,

Tom

Re: Pix security level 0

l.mourits — Tue, 12 Aug 2003 05:58:27 GMT

The PIX will not accept two interfaces with securitylevel 0 because securitylevel 0 is reserved for the interface named outside (case sensitive)

You can however configure two interfaces with securitylevel 1 and then the default behaviour of this can be found on the link Tom allready provided

Kind Regards,

Leo