[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 332
  • Last Modified:

total number of virtual interfaces allowed on a 506e

As I understand it only two virtual interfaces may be utilized on a 506e.  Currently I have one inside interface.  I would like to add two more interfaces.  The end result being 3 vlan's associated to 3 different interfaces.  When they say 'two virtual interfaces' does that include the default inside interface?  or, does the default inside interface become a virtual once another is created?
0
gopher_49
Asked:
gopher_49
1 Solution
 
batry_boyCommented:
If you look at the following table, you will see that the 506 with an unrestricted license installed will support a total of 4 interfaces...2 physical and 2 logical.

http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/bafwcfg.html#wp1117157

>>When they say 'two virtual interfaces' does that include the default inside interface?

No, it doesn't.  You associate two logical interfaces that you create with the inside or outside interfaces, but you wind up with 2 physical and 2 logical interfaces.  The link above contains a section named "Using VLANs with the Firewall".  Read that section and it should be explained.
0
 
lrmooreCommented:
Yes, you can have 3 vlans inside for a total of 4 interfaces on 506e

interface ethernet0 auto
interface ethernet1 auto  <== physical interface = vlan1 native untagged
interface ethernet1 vlan2 logical  <= virtual #1
interface ethernet1 vlan3 logical  <= virtual #2

nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif vlan2 intf2 security4
nameif vlan3 intf3 security6

ip address outside dhcp setroute
ip address inside 192.168.122.133 255.255.255.128
ip address intf2  192.168.123.1 255.255.255.0
ip address intf3 192.168.122.1 255.255.255.128

Switchport that the PIX physical interface plugs into must be a trunk port.
Done.
0
 
gopher_49Author Commented:
perfect!
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now