Solved

Two routes out of a PIX

Posted on 2008-10-20
8
264 Views
Last Modified: 2008-11-07
I currently have a PIX on my corporate network which is our internet firewall. the internal interface of the PIX is on a VLAN which has all the traffic being monitored by a third party software package. My question is can I setup a second internal interface on the pix in order to bypass the VLAN the internal interface1 is on.
0
Comment
Question by:dtadmin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
8 Comments
 
LVL 32

Expert Comment

by:rsivanandan
ID: 22758508
Why would you do this?

Cheers,
Rajesh
0
 

Author Comment

by:dtadmin
ID: 22758805
for testing purposes in order to rule out issues with the 3rd party software blocking access.
0
 
LVL 32

Expert Comment

by:rsivanandan
ID: 22759252
You can do that by putting the other interface in another VLAN and should not be a problem.

Cheers,
Rajesh
0
Webinar May 25: Cloud Security Strategies for SMBs

Small and mid-sized businesses are a driving force behind cloud adoption, and it’s no wonder: cloud benefits are BIG.  But for all the convenience that moving to the cloud provides, where does security come into play?

 
LVL 79

Expert Comment

by:lrmoore
ID: 22759552
You cannot setup another interface on the same IP subnet, on a different vlan, if this is what you're talking about...
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 22759556
What kind of issues are you having that you are trying to troubleshoot?
0
 

Author Comment

by:dtadmin
ID: 22759557
right now the default route on my layer3 switch is the VLAN the pix's inside interface is a member of. How do I get around that without affecting all other users?
0
 

Author Comment

by:dtadmin
ID: 22759593
I have a VLAN that has a network of 10.10.30.0/24

do I just create a route in my layer3 switch pointing all traffic from the above vlan to the seconds interface on the pix?
0
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 22759670
Only if your switch supports route-maps and Policy Based Routing.
I guess I'm just not following what it is you are trying to do.
You can easily setup a new vlan with nothing more than the other pix interface and a L3 interface on the switch...
Something like this:

interface gig 0/12
 descript connection to second PIX interface
 no switchport
 ip address 10.20.30.2 255.255.255.0
ip route 0.0.0.0 0.0.0.0 10.20.30.1

PIX:
interface ethernet 2
 nameif dmz1
 ip address 10.20.30.1 255.255.255.0
nat (dmz1) 1 0 0
global (outside) 1 interface


ip address 10.20.30.1
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question