Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Can trunking VLAN exist in Regular cable base Failover Pix515 ver 6.3.5 ?

I have two identical Pix515 each with 2 Ethernet (E0 and E1) unrestricted licenses.

E1 interface is configured as follow:

PIX Version 6.3(5)

interface ethernet0 100full

interface ethernet1 100full

interface ethernet1 vlan2 physical

interface ethernet1 vlan3 logical

interface ethernet1 vlan4 logical

interface ethernet1 vlan5 logical

interface ethernet1 vlan6 logical

interface ethernet1 vlan7 logical

interface ethernet1 vlan8 logical

interface ethernet1 vlan9 logical

interface ethernet1 vlan10 logical

nameif ethernet0 outside security0

nameif ethernet1 inside security100

nameif vlan3 intf3 security35

nameif vlan4 intf4 security45

nameif vlan5 intf5 security55

nameif vlan6 intf6 security65

nameif vlan7 intf7 security75

nameif vlan8 intf8 security85

nameif vlan9 intf9 security95

nameif vlan10 intf10 security98

I have to use VLAN trunking to pass the traffic for logical interface above, according to the doc below, the trunking must turn off. So how can I configure Regular cable base failover with VLAN?? Thanks for all helps.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/failover.htm#wp1025358

Configuring Switches to Support Failover

Perform the following steps on any Cisco switch ports that connect directly to the PIX Firewall:

--------------------------------------------------------------------------------

Step 1 Enable PortFast.

Step 2 Turn off trunking.

Step 3 Turn off channeling

  • Other Security Subjects
1 REPLY
Silver

Re: Can trunking VLAN exist in Regular cable base Failover Pix51

You can't. There needs to be a dedicated ethernet for network based FO. If you distance is not an issue you could use the serial cable. Or you could purchase additionl ethernet ports.

111
Views
0
Helpful
1
Replies
This widget could not be displayed.