Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 910
  • Last Modified:

Can a Cisco PIX 501 pass traffic to multiple VLANs?

Here is my set up

DSL--->Cisco Pix 501(IP is in LAN subnet)--->Switch (LAN Subnet wit clients attached)--->Cisco Router---->Switch with 8VLANs (all different subnets than the LAN subnet)

Static routing is configured and working for all VLAN subnets on the PIX and cisco router, a default route is configured on the PIX and Cisco router.

I can get on the internet from the VLANs out through the PIX and ping the PIX LAN IP.

I cannot access any clients on LAN from the VLANs and all clients on the LAN cannot access any clients on the VLANS.

I can ping all clients on the VLANs from inside the PIX and I can ping all clients in the LAN from the Cisco router.

I am not sure where the problem lies, i am thinking I need some type of access list but I have tried quite a few with no luck.

Has anyone come across this type of problem.

Thanks
0
pureauto
Asked:
pureauto
  • 2
1 Solution
 
naughtonCommented:
the idea behind vlans is exactly what you describe.

the LAN clients would likely be in the native VLAN - and hence should be unable to see and pass traffic to hosts on other Vlans.

0
 
pureautoAuthor Commented:
VLANs are unable to pass traffic between each other or other networks true, unless there is a router invloved to make routing decisions based on a routing table.

I figured out the problem and a solution. The PIX was handing out DHCP to the LAN with its LAN IP configured as the default gateway. For some reason it could not route to the VLANs.  I changed the default gateway to the router instead of the PIX and everything can talk with no problem now. I am changing the design up a bit. DSL-->PIX-->Router-->LAN and VLANs, this leaves me with other switch ports on the PIX open for more routers and future expansion. It also allows all my networks to communicate when needed and break up broadcast domains.




0
 
pureautoAuthor Commented:
One other note on this. I changed the DHCP server to be the router instead of the PIX.  The PIX would not allow me to change what it gave out as the DHCP default gateway. I set the PIX up to use the router as its DHCP relay.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Increase Security & Decrease Risk with NSPM Tools

Analyst firm, Enterprise Management Associates (EMA) reveals significant benefits to enterprises when using Network Security Policy Management (NSPM) solutions, while organizations without, experienced issues including non standard security policies and failed cloud migrations

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now