config of Vlan on Pix

[lformelli]

If I have an a Pix that support vlan can working fine this configuration with two subnet that have surf on internet with PAT ?

thanks

Lorenzo

interface ethernet0 auto

interface ethernet1 100full

interface ethernet1 vlan2 physical

interface ethernet1 vlan3 logical

nameif ethernet0 outside security0

nameif ethernet1 inside security100

nameif vlan3 dmz security 80

ip address outside "public address"

ip address inside 192.168.12.254 255.255.255.0

ip address dmz 192.168.20.1 255.255.255.0

global (outside) 1 interface

nat (inside) 1 192.168.12.0 255.255.255.0 0 0

nat (dmz) 1 192.168.20.0 255.255.255.0 0 0

[arunsing]

Hi,

I am sorry I could not understand your question.

[lformelli]

Hi,

simply I have an a Pix that support vlan.

I have two vlan on inside interface connected with trunk .

I need two allow for both subnet surf on Internet.

Can this configuration working fine ?

thanks

Lorenzo

[mgaysek]

Yes. Treat them like separate interfaces and create NATs for both.