Solved

Two routes out of a PIX

Posted on 2008-10-20
8
261 Views
Last Modified: 2008-11-07
I currently have a PIX on my corporate network which is our internet firewall. the internal interface of the PIX is on a VLAN which has all the traffic being monitored by a third party software package. My question is can I setup a second internal interface on the pix in order to bypass the VLAN the internal interface1 is on.
0
Comment
Question by:dtadmin
  • 3
  • 3
  • 2
8 Comments
 
LVL 32

Expert Comment

by:rsivanandan
ID: 22758508
Why would you do this?

Cheers,
Rajesh
0
 

Author Comment

by:dtadmin
ID: 22758805
for testing purposes in order to rule out issues with the 3rd party software blocking access.
0
 
LVL 32

Expert Comment

by:rsivanandan
ID: 22759252
You can do that by putting the other interface in another VLAN and should not be a problem.

Cheers,
Rajesh
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 22759552
You cannot setup another interface on the same IP subnet, on a different vlan, if this is what you're talking about...
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 79

Expert Comment

by:lrmoore
ID: 22759556
What kind of issues are you having that you are trying to troubleshoot?
0
 

Author Comment

by:dtadmin
ID: 22759557
right now the default route on my layer3 switch is the VLAN the pix's inside interface is a member of. How do I get around that without affecting all other users?
0
 

Author Comment

by:dtadmin
ID: 22759593
I have a VLAN that has a network of 10.10.30.0/24

do I just create a route in my layer3 switch pointing all traffic from the above vlan to the seconds interface on the pix?
0
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 22759670
Only if your switch supports route-maps and Policy Based Routing.
I guess I'm just not following what it is you are trying to do.
You can easily setup a new vlan with nothing more than the other pix interface and a L3 interface on the switch...
Something like this:

interface gig 0/12
 descript connection to second PIX interface
 no switchport
 ip address 10.20.30.2 255.255.255.0
ip route 0.0.0.0 0.0.0.0 10.20.30.1

PIX:
interface ethernet 2
 nameif dmz1
 ip address 10.20.30.1 255.255.255.0
nat (dmz1) 1 0 0
global (outside) 1 interface


ip address 10.20.30.1
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Optimal Xbox 360 connectivity requires "OPEN NAT". If you use Juniper Netscreen or SSG firewall products in a home setting, the following steps will allow you get rid of the dreaded warning screen below and achieve the best online gaming environment…
This article will cover setting up redundant ISPs for outbound connectivity on an ASA 5510 (although the same should work on the 5520s and up as well).  It’s important to note that this covers outbound connectivity only.  The ASA does not have built…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now