total number of virtual interfaces allowed on a 506e

As I understand it only two virtual interfaces may be utilized on a 506e.  Currently I have one inside interface.  I would like to add two more interfaces.  The end result being 3 vlan's associated to 3 different interfaces.  When they say 'two virtual interfaces' does that include the default inside interface?  or, does the default inside interface become a virtual once another is created?
gopher_49Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

batry_boyCommented:
If you look at the following table, you will see that the 506 with an unrestricted license installed will support a total of 4 interfaces...2 physical and 2 logical.

http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/bafwcfg.html#wp1117157

>>When they say 'two virtual interfaces' does that include the default inside interface?

No, it doesn't.  You associate two logical interfaces that you create with the inside or outside interfaces, but you wind up with 2 physical and 2 logical interfaces.  The link above contains a section named "Using VLANs with the Firewall".  Read that section and it should be explained.
0
lrmooreCommented:
Yes, you can have 3 vlans inside for a total of 4 interfaces on 506e

interface ethernet0 auto
interface ethernet1 auto  <== physical interface = vlan1 native untagged
interface ethernet1 vlan2 logical  <= virtual #1
interface ethernet1 vlan3 logical  <= virtual #2

nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif vlan2 intf2 security4
nameif vlan3 intf3 security6

ip address outside dhcp setroute
ip address inside 192.168.122.133 255.255.255.128
ip address intf2  192.168.123.1 255.255.255.0
ip address intf3 192.168.122.1 255.255.255.128

Switchport that the PIX physical interface plugs into must be a trunk port.
Done.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
gopher_49Author Commented:
perfect!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.