Pix security level 0

[mathia5]

Are there any known issues with having 2 interfaces with security level 0???

thanks

[mostiguy]

That is an unsupported configuration - whether it works or not, if you ever need to open a support case with the TAC, they can tell you you are out of luck

[tvanginneken]

Hi,

In the command reference (v6.3) you can find this comment when you look at the 'nameif' command

"Interfaces with the same security level cannot communicate with each other. We recommend that every interface have a unique security level."

In the Cisco Press I read a few months ago, they said it was not a TAC supported config.

Kind Regards,

Tom

[l.mourits]

The PIX will not accept two interfaces with securitylevel 0 because securitylevel 0 is reserved for the interface named outside (case sensitive)

You can however configure two interfaces with securitylevel 1 and then the default behaviour of this can be found on the link Tom allready provided

Kind Regards,

Leo