communication between PiX internal interface

Answered Question
Sep 2nd, 2007
User Badges:

hi,

i am using a Pix firewall for hiding my two internal networks( for ex network A and B) connected to seperate interfaces of the PIX firewall.


a) i installed one windows server on

network A , and it's working properly for Network A users.

b) i want to share this windows server for users in Network B. i am not able to achieve this , perhaps i have to open PiX firewall as Network A & B are on two seperate interface.


Please guide me for a sample cisco config Or suggest.



Thanks,mahesh.


Correct Answer by Jon Marshall about 9 years 10 months ago

Mahesh


You can do this one of 2 ways.


1) If the 2 interfaces are the same security level you can use the following command


"same-security-traffic permit inter-interface"


if you do this traffic an flow freely between the 2 interfaces without any access-lists or NAT.


2) If you would rather control traffic. It all depends on which interface has a higher security level.


Can you post the security levels for the 2 interfaces. You can get these from a "sh run"


Jon

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Jon Marshall Sun, 09/02/2007 - 08:48
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Hi Mahesh


What version of Pix are you running ?


What security levels do each of the interfaces have ?


Jon

ciscotech4u Sun, 09/02/2007 - 08:53
User Badges:

dear jon,

it's 7.1 and pix configured as basic firewall ( no VPN ) , so the question is how to open one interface for another in a pix firewall.


rgds,mahesh.

Correct Answer
Jon Marshall Sun, 09/02/2007 - 09:56
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Mahesh


You can do this one of 2 ways.


1) If the 2 interfaces are the same security level you can use the following command


"same-security-traffic permit inter-interface"


if you do this traffic an flow freely between the 2 interfaces without any access-lists or NAT.


2) If you would rather control traffic. It all depends on which interface has a higher security level.


Can you post the security levels for the 2 interfaces. You can get these from a "sh run"


Jon

ciscotech4u Sun, 09/02/2007 - 10:30
User Badges:

dear Jon,

Appriciate your help.


your question on security level help me to fix the problem and i got a sample config

showing the config from low security zone to

high security zone.


Tks,mahesh

mkkeyan Tue, 09/04/2007 - 01:36
User Badges:

can post sample Config here, more or less iam in the same situation .

Tks

karthik

Actions

This Discussion