Solved: PIX firewall VLAN

pramod · ‎07-13-2010

Hi,

I am currently having a cisco switch and a pix firewall,

how to create vlans on firewall to provide intervlan routing

and i have to nat the vlan subnets to outside interface,

one more requirement is i need to give outside host to inside access !

experts please help me

Thanks,

Pramod

Kevin Redmon · ‎07-13-2010

Pramod,

Here is a document on how to configure PIX sub-interfaces.

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/intparam.html

Once you have the sub-interfaces configured, you can treat them each as a separate "zone". For instance:

interface ethernet0/0.1

vlan 101

nameif inside

ip address 10.1.1.1 255.255.255.0

security-level 100

interface ethernet0/0.2

vlan 102

nameif dmz

ip address 10.1.2.1 255.255.255.0

security-level 50

interface ethernet0/0.3

vlan 103

nameif outside

ip address x.x.x.x 255.255.255.0

security-level 0

nat (inside) 1 0.0.0.0 0.0.0.0

nat (dmz) 1 0.0.0.0 0.0.0.0

global (outside) 1 interface

Let me know if this helps! If so, please be sure to mark this topic as answered.

Best Regards,

Kevin

View solution in original post

Kevin Redmon · ‎07-13-2010

Pramod,

Here is a document on how to configure PIX sub-interfaces.

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/intparam.html

Once you have the sub-interfaces configured, you can treat them each as a separate "zone". For instance:

interface ethernet0/0.1

vlan 101

nameif inside

ip address 10.1.1.1 255.255.255.0

security-level 100

interface ethernet0/0.2

vlan 102

nameif dmz

ip address 10.1.2.1 255.255.255.0

security-level 50

interface ethernet0/0.3

vlan 103

nameif outside

ip address x.x.x.x 255.255.255.0

security-level 0

nat (inside) 1 0.0.0.0 0.0.0.0

nat (dmz) 1 0.0.0.0 0.0.0.0

global (outside) 1 interface

Let me know if this helps! If so, please be sure to mark this topic as answered.

Best Regards,

Kevin

pramod · ‎07-14-2010

Thanks a lot, can you please help me for the below posted link ?

https://supportforums.cisco.com/thread/2032049

Thanks in advance

Kevin Redmon · ‎07-15-2010

K.G,

If the previous response was adequate to solve your issue, please be sure to mark it as answered so others can benefit from the knowledge. I'll take a look at the other post now.

Best Regards,

Kevin