VLAN-based virtual interfaces With PIX 515e

[sharris]

I am looking for configuration examples on setting up VLAN-based virtual interfaces with a PIX 506e and a 2950 switch.

I need a DMZ on this PIX, and noticed this option.

HAs anyone set this up before?

[lubo.nistor]

well i did that on 515, it works but you only gain 2 more ifaces..

that is if you have 5 physical you can have max 3 virtual.

examples are on this website (at least i've found it here).

which OS do you have on Pix?

[sharris]

6.3

I couldn't find anything here. A lot on VLAN's but not configurating the PIX using the Virtual VLANS

[minoc]

Hello,

Here are is an example on how to do this in version 6.3.4:

interface ethernet1 vlan18 logical ---> map physical if to virtual if

nameif vlan18 web-host security70 ---> asign name to virtual if, include security level

ip address web-host 192.168.150.1 255.255.255.0 ---> asign IP address to virtual if

Remember the port connected in the switch for the PIX must be setup as trunk port.

Regards,

Carlos Roque

[sohaildxbfze]

Hi there,

will each vlan in pix 515 will support its own dhcpd service

[Jennifer Halim]

Yes, you can configure each PIX interface with dhcpd service. The dhcpd configuration is normaly per interface.

Here is the command reference:

http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/df.html#wp1025497