PIX 515e VLAN issue

[mbalasubramanian]

WE have pix 515 FOS ver 6.3.We are looking at two subnets terminating on the external interface.and differential policy nat for outgoing traffic.How do we enable VLAN trunking on the external interface and define acls between the two vlans terminating on the external interface.Help appreciated

[jboyer]

From Pix 6.3 doc:

With Version 6.3, you can assign VLANs to physical interfaces on the PIX Firewall, or you can configure multiple logical interfaces on a single physical interface and assign each logical interface to a specific VLAN.

ACLs can be applied seperately to the logical interfaces, as can global statements for nat.

I haven't tested this myself but I imagine the only problem you may have is compatibility between the pix and the device you are connecting to with the vlan trunk.