Solved

How to configure vlans on my Cisco pix  515e

Posted on 2011-09-10
6
635 Views
Last Modified: 2012-08-13
Hi Experts,

I have a cisco switch 3550 in which I will configure the vlans 10 and 20.
The VLAN 10 with ip 192.168.1.10
The VLAN 20 with ip 10.0.0.10

My PIX 515E
Will have NAT and PAT enable, I do not have a static ip address outside, I checked the configurations on how to create a vlan and I noticed that the inside E1 interface is not configure but instead they assign the VLANS as interface E1.10  AND interface E1.20 instead.
My question is:
Do I have to assign an ip address to the inside interface E1 when creating VLANS on that interface?
If I do not assign an ip address then how can I manage the PIX using SSH or telnet?

Please advise.
0
Comment
Question by:chenzovicc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 10

Expert Comment

by:SuperTaco
ID: 36517216
Instead of assigning an I tothe interface, create a sub interface and define whati VLAN it belongs to

ocnfig t
int e1.1
encapsulation .1q
vlan 1000
ipaddress x.x.x.x
0
 

Author Comment

by:chenzovicc
ID: 36517291
So you mean that instead of assigning an ip address to the inside E1 interface I should create the 2 vlans on the E1?.
Do I have to assign a NAT for every vlan? so they can access the internet?
0
 
LVL 10

Accepted Solution

by:
SuperTaco earned 250 total points
ID: 36517447
Yes, and you should just have to assign a static route.  
0
Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

 

Author Comment

by:chenzovicc
ID: 36518158
You mentioned that I should assign a static route but if my vlans are coming from a HIGHER LEVEL interface to a lower level(INTERNET) Do I still need to assign static routes?.

Thanks
0
 
LVL 18

Assisted Solution

by:fgasimzade
fgasimzade earned 250 total points
ID: 36521843
Your subinterfaces (vlans) are like physical interfaces, so you would need NAT for both of them.

A static route pointing to the internet is usually looks like this:

route outside 0.0.0.0 0.0.0.0 ip_default_gateway
0
 

Author Closing Comment

by:chenzovicc
ID: 36551864
Thanks
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
Suggested Courses
Course of the Month9 days, 5 hours left to enroll

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question