Pix 515e and Vlans

Unanswered Question
Sep 24th, 2007

Hi we are going to replace are old 2600 with a new pix 515e. While this is happening we are going to try and setup another VLan to allow us access to more IP address.

I have pluged the pix (inside) into one of are 3com 2250 plus switches and setup some ports on vlan 2 and the rest in the default vlan 1. The uplink port on the 2250 is set to be a tagged member of VLan 2 and an untagged member of VLan 1.

On the pix I have setup the inside interface as 192.168.1.1 (physical) and added vlan 2 as 192.168.2.1 both have a security rating of 100 and I have ticked the boxs to allow traffic between them on asdm.

The problem I am havin is the 2 networks cant comunicate with each other they can see there own local gateway but they dont seem to be gettign routed on to the other VLan.

Any ideas ?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
lgijssel Mon, 09/24/2007 - 01:57

Routing with a PIX is pretty basic when it comes to this. The PIX will not perform this kind of redirection, it will only forward packets to a different physical interface.

You will need an extra router when you need this inter-vlan communication.

regards,

Leo

Actions

This Discussion