I am planning on vlanning several semi-trusted networks. I want the Vlans to pass through a firewall before being routed to their appropriate destinations (either another VLAN or the internet).
The problem is I am using a Sidewinder G2 firewall with limited ports. They support sub-interfaces (burbs) so I want to use sub interfaces to send all my traffic out one physical ethernet port.
The problem is, how do I keep the router with the subinterface from routing directly from one VLAN to another withhout first passing the traffic out to the firewall while allowing the traffic BACK from the firewall to be routed.
Remember the traffic goes and comes on the same sub interface.
This is kind of difficult to explain, it amounts to a firewall on a stick (or a one armed firewall) if you will.
I can provide a visio diagram to make this clearer if you think you can help.
Thanks for your response. I have just now emailed you the picture that represents our dilemna. I guess basically I want a firewall on the end of a router on a stick. Anyhow, hopefully the picture with its notes makes it clear.
We are pleased to announce availability of Beta software for 16.6.3.
16.6.3 will be the second rebuild on the 16.6 release train targeted
towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are
looking for early feedback from customers befor...
Introduction Featured Speakers Luis Espejel is the Telecommunications
Manager of IENova, an Oil & Gas company. Currently he works with Cisco
IOS® and Cisco IOS XE platforms, and NX to some extent. He has also
worked as a Senior Engineer with the Routing P...
In this session you can learn more about Layer 3 multicast and the best
practices to identify possible threats and take security measures. It
provides an overview of basic multicast, the best security practices for
use of this technology, and recommendati...