PIX logical interfaces

[rsommer]

Would the following be correct? -

(1) PIX will support logical interfaces - but the frames will (no way around it) then be tagged .1Q.

(2) Hence, coordinating with ISP's to encapsulate their frames will not be fun.

Thanks in advance.

Rick

[sstudsdahl]

Rick,

The PIX would have to have the physical interface connected to a switchport configured as a dot1q trunk. Within the switch, define the VLAN's appropriate to what is configured for logical interfaces within the PIX. Each connection to an ISP would then get connected to the switch and the specific switchport would be placed in the appropriate VLAN. As long as the switchport that the ISP connects to is not a trunk port, there will be no tagged frames to worry about being sent to the ISP's.

Steve

[rsommer]

Thanks - that's a duh on my part.