Pix Firewall Interface Configuration

[srowles]

Hi

On a PIX 525 running ver 6.3 with a 4 port 10/100 card installed will it be possible to configure the interfaces as follows:

e0 - Inside interface

e1 - Firewall stateful failover

e2 - Firewall Failover monitoring link

e5 - Outside interface

I am basically unsure as to whether is is possible to move the outside interface from it's default configuration as e0 to e5 and similarly if it will be possible to specify e0 as the inside interface instead of the default confiuration of e1=inside.

One other quickie - I assume that with the additional 4 port 10/100 card installed my interfaces will be numbered e0-e5. Is that correct?

Thanks.

[m.sir · Accepted solution]

Some Cisco documentation says that is not possible to change name and security level of inside interface but i have experience that is possible:

nameif ethernet1 failover security50

nameif ethernet5 outside security0

etc...

I wouldn't recommend doing it in a production environment since it would create a lot of confusion...

525 has two fixed interfaces e0 e1 - so expansion 4 port card should be numbered e2, e3 (from left to right)

M.

Hope that helps rate if it does

[srowles]

Thanks for the reply.

I have now been able to test this and was able to configure the following using ver 6.3(3)

nameif ethernet0 inside security100

nameif ethernet1 stateful security10

nameif ethernet2 failover security20

nameif ethernet3 intf3 security6

nameif ethernet4 intf4 security8

nameif ethernet5 outside security0