Learning - Testing pix, What should i purchase

[cnewman1000]

Hi,

I currently have a pix classic, i am using this to learn - testing.

I would like to be able to upgrade to the latest PIX OS, (the classic can only support ~5.1)

I have about 10 PC's on my Home Lab. I do not want to purchase anything fast, expensive.

I was looking at the 501, if anyone could recommend a model that supports the latest OS, has as many features as possible, but a low end?

Thanks

[shamilton-wilkes]

Any 501 will do. If you can afford a 506 though, then you'll be able to use VLANs so you can practice with multiple interfaces etc. 6.3.4 is current. 7 will be out for 515+ later this year, but 501 & 506 won't support 7 'till 7.1 arrives next year.

[cnewman1000]

Thanks for your reply, was a great help

I have been think how I need to setup my lab.

I think I may need a DMZ, (or not sure if i can do this with a vlan)

I would like to use one interface for my lan, one for the wan, and I would like another for my live web server.

Will the 506 be able to do this? Or will i need a device that can take 3 interfaces?

Thanks

[mostiguy]

you need to assess whether a pix 515 or 515e, new or used (as they have a minimum of 3 physical ints), is more expensive than buying a 506 along with a managed switch that you can create vlans with.

[cnewman1000]

Thanks for your reply,

So if I got the 506, i could setup VLANS (i have a 2950 switch), and this would allow me to have a DMZ of sorts?

Thanks

[prasadrp]

501/506 do not support vlans. The entry level model which supports vlans currently is 515E

[scoclayton]

This information is outdated. 6.3(4) adds support for 2 logical interfaces on the 506/506E series PIX's. Still no .1q support on the 501 series PIX's.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/63rnotes/pixrn634.htm#wp159177

Scott

[prasadrp]

Thanks for the update. That's great news.