Additional interface card for PIX 515E?

Unanswered Question
Sep 27th, 2010

We have a PIX 515e. This has 2 built in ethernet interfaces. My requirement is to add an additional interface card to this device so that I can add a DMZ to my network.

Below is the sh version output of my PIX:

sh ver

Cisco PIX Security Appliance Software Version 8.0(3)
Device Manager Version 6.0(2)
Compiled on Tue 06-Nov-07 19:50 by builders
System image file is "flash:/pix803.bin"
Config file at boot was "startup-config"

Encryption hardware device : VAC+ (Crypto5823 revision 0x1)
0: Ext: Ethernet0           : address is 0013.7fdd.2671, irq 10
1: Ext: Ethernet1           : address is 0013.7fdd.2672, irq 11

Licensed features for this platform:
Maximum Physical Interfaces  : 6
Maximum VLANs                : 25
Inside Hosts                 : Unlimited
Failover                     : Active/Standby
VPN-DES                      : Enabled
VPN-3DES-AES                 : Enabled
Cut-through Proxy            : Enabled
Guards                       : Enabled
URL Filtering                : Enabled
Security Contexts            : 2
GTP/GPRS                     : Disabled
VPN Peers                    : Unlimited

This platform has a Failover Only-Active/Standby (FO) license.

It shows "Maximum Physical Interfaces  : 6". So, I guess I could extend the number of interfaces.  Can some one please confirm this?

Also, it will be a great help if you could specify the part number of the interface card I should purchase (single port or multi port).

Thanks in advance for any help,

Ribin

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jon Marshall Mon, 09/27/2010 - 09:23

Ribin

Your Pix will take a new interface card such as the PIX-IFE but the problem is that the End of Sale for pix firewalls + interfaces was January 27 2009, see attached doc for details -

Pix EoS/EoL

You could either -

1) upgrade to the ASA which is the replacement device

or

2) try to source a second hand card. Perhaps have a google to see if there are any vendors etc. that could sell you one.

Jon

Actions

This Discussion