pix and three subnet

[ybzhang]

I configured three vlans on catalyst2950,between 2950 and cisco3620,there is a pix 515,So could I make all of three vlans go to internet?

If there is pix,i can configure subinterface on router,but now,how can i do?

[wdalati]

If you don't have a layer 3 device then you are stuck since the pix is not a layer 3 router. So you can do the following:

1- change your switch to 2948L3, it has 2 Gig and 48 ports(check http://www.cisco.com/warp/public/cc/pd/si/casi/ca2900/index.shtml)

2- buy a small router with 2 ethernet interfaces and make ISL on one of the ethernet interface (subinterfaces) and connect the other interface to the pix inside interface. Then configure the inside pix interface to route to the router interface it is in front of it.

Otherwise i am sorry that you can not do anything regarding this issue.

[ybzhang]

you offered two very good advices,thanks a lot!