Two routes out of a PIX

I currently have a PIX on my corporate network which is our internet firewall. the internal interface of the PIX is on a VLAN which has all the traffic being monitored by a third party software package. My question is can I setup a second internal interface on the pix in order to bypass the VLAN the internal interface1 is on.
dtadminAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

rsivanandanCommented:
Why would you do this?

Cheers,
Rajesh
0
dtadminAuthor Commented:
for testing purposes in order to rule out issues with the 3rd party software blocking access.
0
rsivanandanCommented:
You can do that by putting the other interface in another VLAN and should not be a problem.

Cheers,
Rajesh
0
Become an IT Security Management Expert

In today’s fast-paced, digitally transformed world of business, the need to protect network data and ensure cloud privacy has never been greater. With a B.S. in Network Operations and Security, you can get the credentials it takes to become an IT security management expert.

lrmooreCommented:
You cannot setup another interface on the same IP subnet, on a different vlan, if this is what you're talking about...
0
lrmooreCommented:
What kind of issues are you having that you are trying to troubleshoot?
0
dtadminAuthor Commented:
right now the default route on my layer3 switch is the VLAN the pix's inside interface is a member of. How do I get around that without affecting all other users?
0
dtadminAuthor Commented:
I have a VLAN that has a network of 10.10.30.0/24

do I just create a route in my layer3 switch pointing all traffic from the above vlan to the seconds interface on the pix?
0
lrmooreCommented:
Only if your switch supports route-maps and Policy Based Routing.
I guess I'm just not following what it is you are trying to do.
You can easily setup a new vlan with nothing more than the other pix interface and a L3 interface on the switch...
Something like this:

interface gig 0/12
 descript connection to second PIX interface
 no switchport
 ip address 10.20.30.2 255.255.255.0
ip route 0.0.0.0 0.0.0.0 10.20.30.1

PIX:
interface ethernet 2
 nameif dmz1
 ip address 10.20.30.1 255.255.255.0
nat (dmz1) 1 0 0
global (outside) 1 interface


ip address 10.20.30.1
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.