Multiple virtual interfaces on PIX-525 ??????

[afzaalq007]

Hi

i want to config a pix 525. i have some problem. and wat to discuss here regarding my scanrio..

I Have Pix 525 avialable with 2 physical interfaces. where as i need 4 interfces.

how can i do it 2 interfces are there i need 2 more for my scanrio.....

One is DMZ ???

and other is For mangnet ???

plz provode me sample config

Thanks and regards

[Jon Marshall]

You can use logical interfaces on the Pix 525. Here is an excerpt from one of our production Pix firewalls

interface ethernet0 100full

interface ethernet1 100full

interface ethernet1 vlan191 physical

interface ethernet1 vlan171 logical

interface ethernet1 vlan190 logical

interface ethernet2 100full

nameif ethernet0 outside security0

nameif ethernet1 inside security100

nameif ethernet2 state-fail security10

nameif vlan171 app-layer-inside security95

nameif vlan190 oracle-dev security90

Once you have created the virtual interfaces you then treat them as you would physical interfaces in terms of NAT and access-lists.

Whichever physical interfaces you use will need to be setup as a trunk on the switch end.

HTH

[afzaalq007]

Hi

Thanks for the Ans ...

can u provide me some references link for more detail

Thanks and regard

[Jon Marshall]

here is a link for Pix ver 6.3.

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a0080172786.html

HTH