Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 524
  • Last Modified:

Putting a new server behind a firewall that has no NIC's spare

hi,
I'm wanting to put in a new file server behind the already existing firewall (Cisco PIX 515e) which has already used up all its NIC's with a terminal server, sql server, Nortel contivity switch, linux proxy and mail server, and a win 2k server that hosts extranet web pages. my network layout looks like this:
                                                     Internal LAN
                                                           |
                                        |-------------Hub
                                        |
                                        |--------rest of the other servers
                                        |
                                        |
FOBOT----switch-----PIX firewall-----|--Contivity Switch
                                                     |        |
                                                     |-----hub-----Cisco 801 router------64k IDSN----------

This new file server going in is going to be accessed remotely via the fibre optic over the other side of the site, i want this server to be on like a VLAN so users connecting to it cant see the rest of the equipment on the network, how would i go about doing this?

thanks anthony
0
Anthony_E
Asked:
Anthony_E
  • 4
  • 2
1 Solution
 
lrmooreCommented:
How many interfaces do you have on the PIX? 3 or 6? If only 3, then you can swap out the single NIC for a quad port (if you have unrestricted license).
Does your internal switch do VLANS? If so, your PIX inside interface does too...
0
 
Anthony_EAuthor Commented:
yeah my switch does do VLANS, so does that mean all i have to do is setup a VLAN for 1 port and setup the PIX for that IP?
0
 
Anthony_EAuthor Commented:
and by the looks of it it has 5 interfaces, i cant see behind the actuall PIX cos its mounted and from diagrams i have from ppl who documented it it seems to have 5 interfaces all being used.
0
Lessons on Wi-Fi & Recommendations on KRACK

Simplicity and security can be a difficult  balance for any business to tackle. Join us on December 6th for a look at your company's biggest security gap. We will also address the most recent attack, "KRACK" and provide recommendations on how to secure your Wi-Fi network today!

 
Anthony_EAuthor Commented:
sorry its 6 not 5 must have typoed twice
0
 
lrmooreCommented:
Are all interfaces already in use? If you have 4 different DMZ's why can't you just add this server to one of those DMZ's already set up?
It's not quite that simple, you have to setup your trunking and the switchport connecting to the pix must be a trunk port, setup sub-interfaces on the pix and assign the sub-interfaces the appropriate IP addresses.
0
 
Anthony_EAuthor Commented:
thanks for your help you certainly pointed me into the right direction
0

Featured Post

Ask an Anonymous Question!

Don't feel intimidated by what you don't know. Ask your question anonymously. It's easy! Learn more and upgrade.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now