Pix 506e DMZ Config

[carousellogistics]

I am new to Cisco Pix and need to configure a 506e we have purchased to use a DMZ. Does anyone have a basic DMZ config I can work with. We have our internal network on 192.168.1.x and a Vlan on 192.168.2.x. We need access from internal out, and access from internal and external to DMZ.

Any help would be greatly appreciated.

We will also need to add access from external to our exchange server on internal network, and VPN to internal at a later date.

Nick

[owillins]

The Pix 506E has only two interfaces, inside and outside. But if you want to configure DMZ to Pix 506E, you need create VLANS, like a Virtual interface, here are links for the Vlan support and configuration.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/63rnotes/pixrn634.htm#wp159177

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/bafwcfg.htm#wp1113411

[phewes]

Also, keep in mind that the vlan scenario doesn't work without using a vlan other than vlan1. I tried to use a "vlan1" as the physical interface on a 506e and traffic would not pass properly until I set it as VLANs 2 and 3. Odd.

[carousellogistics]

According to the documentation, VLAN1 is always the default LAN, and so a DMZ must be setup on another VLAN to be separate from the LAN. I have my config running our main LAN as VLAN1, and my DMZ on VLAN2.