PIX interface security

[antonio.sobreiro]

Hi,

is it possible to have the same security level in two interfaces of a PIX?

In this case i´m triyng to put security level 100 in two interfaces.

Thanks

Antonio Sobreiro

[b-pelphrey]

No. Security levels 0 and 100 are predefined. You as a admin of the PIX have the ability to pick from 1-99 for your interface security levels.

Hope this helps.

[steve.barlow]

Yes two interfaces can have the same security levels. I am not 100% if you can do that though with the level of 0 and 100 (ie outside and inside), any other level or interface yes. When 2 interfaces have the same level, they can't communicate with each other. Cisco doesn't recommend this and they have said that this ability could be removed in future releases without prior warning. In other words, Cisco doesn't want you to do it.

Hope it helps.

Steve

[b-pelphrey]

Thanks Steve. I stand corrected then! I had no idea you could actually does this and get it to work. I know everything I have read, heard, and done they say what I stated is true. But I would imagine, as you kind of alluded (sp?) too, I wouldn't really try this. However, I love to learn new little nuances about the PIX.

Thanks again!

[antonio.sobreiro]

Hi,

thank you for your support. That realy helps.

Regards

Antonio Sobreiro