Do Cisco 880 series routers support designating one or more of the LAN ports to a DMZ?

[pia.bichsel]

Product documentation states that Cisco series 880 routers have a built-in Layer 2 switch. Does such documentation simply refer to the default configuration of the LAN interfaces or is it not possible to reconfigure the four LAN ports serving different subnets (not just VLANs) at all - in my case an intranet and a DMZ? I found some Cisco documentation that with former 800 series routers a more recent IOS release supported at least designating the fourth LAN port to a dedicated DMZ subnet. In case Cisco series 880 routers also bear this feature: If this goes beyond the Basic feature set of IOS: Which feature set upgrade is being needed?

Of course, the alternative was to use two separate routers, one interior and one exterior one.

[Masoud Pourshabanian]

Hello,

You can configure more interface VLANs on 800 series.

As an example,

interface fa0/1

 switch port vlan 1

interface fa0/1

 switch port vlan 2

interface fa0/2

 switch port vlan 3

interface fa0/3

 switch port vlan 4

interface VLAN 1

ip address x x

interface VLAN 2

ip address different subnet

interface VLAN 3

and so on

Basic IOS should support this.

Did you mean that or you meant any other configuration?

Masoud

[Joseph W. Doherty]

Disclaimer

The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.

Liability Disclaimer

In no event shall Author be liable for any damages wha2tsoever (including, without limitation, damages for loss of use, data or profit) arising  out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.

Posting

I'm not 100% positive with an 880, but believe the built-in L2 ports, except for a special WAN port, will require being assigned to a VLAN.  However, as you can also define SVI interfaces, you can have one or more subnets on those additonal L2 ports.