topic Re: PIX firewall VLAN in Network Security

PIX firewall VLAN

pramod — Mon, 11 Mar 2019 18:10:52 GMT

Hi,

I am currently having a cisco switch and a pix firewall,

how to create vlans on firewall to provide intervlan routing

and i have to nat the vlan subnets to outside interface,

one more requirement is i need to give outside host to inside access !

experts please help me

Thanks,

Pramod

Re: PIX firewall VLAN

Kevin Redmon — Tue, 13 Jul 2010 13:07:38 GMT

Pramod,

Here is a document on how to configure PIX sub-interfaces.

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/intparam.html

Once you have the sub-interfaces configured, you can treat them each as a separate "zone". For instance:

interface ethernet0/0.1

vlan 101

nameif inside

ip address 10.1.1.1 255.255.255.0

security-level 100

interface ethernet0/0.2

vlan 102

nameif dmz

ip address 10.1.2.1 255.255.255.0

security-level 50

interface ethernet0/0.3

vlan 103

nameif outside

ip address x.x.x.x 255.255.255.0

security-level 0

nat (inside) 1 0.0.0.0 0.0.0.0

nat (dmz) 1 0.0.0.0 0.0.0.0

global (outside) 1 interface

Let me know if this helps! If so, please be sure to mark this topic as answered.

Best Regards,

Kevin

Re: PIX firewall VLAN

pramod — Thu, 15 Jul 2010 03:32:59 GMT

Thanks a lot, can you please help me for the below posted link ?

https://supportforums.cisco.com/thread/2032049

Thanks in advance

Re: PIX firewall VLAN

Kevin Redmon — Thu, 15 Jul 2010 12:53:59 GMT

K.G,

If the previous response was adequate to solve your issue, please be sure to mark it as answered so others can benefit from the knowledge. I'll take a look at the other post now.

Best Regards,

Kevin