PIX VLAN TRUNKING

aemr · ‎11-03-2003

Hi,

I need to create 2 VLANs off the inside interface, say VLAN 1 and 2. I set up a switch port to trunk only these VLANs (native VLAN is 1).

I cannot get the pix to communicate on VLAN 1 with other devices in that VLAN. My config looks like the following:

interface e1 vlan131 physical

interface e1 vlan1 logical

nameif vlan1 MANAGEMENT security90

ip address inside 10.0.131.2 255.255.255.0

ip address MANAGEMENT 10.0.128.1 255.255.255.0

I also tried it without the first line to no avail.

Any ideas what I am doing wrong here? Based on the config guide for 6.33 this should work. I also tried it without the first line.

drolemc · ‎11-07-2003

The process of configuring VLANs of PIX is described rather well in the document at http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/bafwcfg.htm#1140517.Read the part about Vlan1 being the native VLAN and the security issues. Also note that the PIX Firewall supports 802.1q for tagging.