Solved

Putting a new server behind a firewall that has no NIC's spare

Posted on 2004-04-27
6
517 Views
Last Modified: 2013-11-16
hi,
I'm wanting to put in a new file server behind the already existing firewall (Cisco PIX 515e) which has already used up all its NIC's with a terminal server, sql server, Nortel contivity switch, linux proxy and mail server, and a win 2k server that hosts extranet web pages. my network layout looks like this:
                                                     Internal LAN
                                                           |
                                        |-------------Hub
                                        |
                                        |--------rest of the other servers
                                        |
                                        |
FOBOT----switch-----PIX firewall-----|--Contivity Switch
                                                     |        |
                                                     |-----hub-----Cisco 801 router------64k IDSN----------

This new file server going in is going to be accessed remotely via the fibre optic over the other side of the site, i want this server to be on like a VLAN so users connecting to it cant see the rest of the equipment on the network, how would i go about doing this?

thanks anthony
0
Comment
Question by:Anthony_E
  • 4
  • 2
6 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 10935212
How many interfaces do you have on the PIX? 3 or 6? If only 3, then you can swap out the single NIC for a quad port (if you have unrestricted license).
Does your internal switch do VLANS? If so, your PIX inside interface does too...
0
 
LVL 5

Author Comment

by:Anthony_E
ID: 10935632
yeah my switch does do VLANS, so does that mean all i have to do is setup a VLAN for 1 port and setup the PIX for that IP?
0
 
LVL 5

Author Comment

by:Anthony_E
ID: 10935645
and by the looks of it it has 5 interfaces, i cant see behind the actuall PIX cos its mounted and from diagrams i have from ppl who documented it it seems to have 5 interfaces all being used.
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 5

Author Comment

by:Anthony_E
ID: 10935648
sorry its 6 not 5 must have typoed twice
0
 
LVL 79

Accepted Solution

by:
lrmoore earned 125 total points
ID: 10938011
Are all interfaces already in use? If you have 4 different DMZ's why can't you just add this server to one of those DMZ's already set up?
It's not quite that simple, you have to setup your trunking and the switchport connecting to the pix must be a trunk port, setup sub-interfaces on the pix and assign the sub-interfaces the appropriate IP addresses.
0
 
LVL 5

Author Comment

by:Anthony_E
ID: 10943744
thanks for your help you certainly pointed me into the right direction
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now