connecting switch 3550 to firewall



Hello,
 I have 2 network connecting to centreal switch 3550
first network has switch (2950) at ip 160.16.209.254 mask 255.255.255.0  gateway 160.16.209.1
secound network switch (2950) at ip 160.16.211.254 mask 255.255.255.0  gateway 160.16..211.1

they are both connect to central switch  3550  ip 160.16.218.254 mask 255.255.255.0
switch is set to ip routing

port 1 of 3550 ip set to 160.16.209.1   (wich connect to network1)
port 2 of 3550 ip set to 160.16.211.1   (wich connect to network2)

Now I want to connect pix firewall 515 to 3550 to protect from a 3 network comming into outside interface of firewall.
(pix inside interface ip of 160.16.218.45 mask 255.255.255.0)
(pix ouside interface ip of 143.139.2.45  mask 255.255.255.192) (uncertain of this ...this is what was given to me)


I am uncertain of what gateway to give to central 3550 switch
in order to direct traffic wich is not destin for 160.16.209. and  160.16.211 to go to firewall

I guess i want to know if i should give gateway of central switch 3550  to ip of firewall and give gateway of inside interface of firewall to ip of central switch


Or do I creat a port on central switch  for example port 3 give it an ip of 160.16.218.1  and connect the firewall to it. give central switch gateway of 160.16.218.1  and also give gateway of firewall inside to 160.16.218.1

Or am I completly lost??
Should I be looking at creating VLAN instead? pros and cons to Vlan?
thanks
jerbellAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

td_milesCommented:
You posted this same question in the firewalls area. Do you want me to answer it here as well ?
http://www.experts-exchange.com/Security/Firewalls/Q_20782114.html
You will find that the same people who read the firewall questions also read the router questions, due to the fact that they are very similar questions usually and there is a large overlap between the two topics. So crossposting will not gain you a larger audience.


0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jerbellAuthor Commented:
ok I will delete it from here.
I wasen't realy sure where it should reside
trhanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.