Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

PIX to ASA 9.1

Posted on 2014-10-16
7
Medium Priority
?
84 Views
Last Modified: 2015-03-13
I am about to deploy a new ASA into a network. We will be replacing a rather old PIX as a result.

We will be leaving the PIX in place for a time period as a precautionary backup.  If the ASA doesn't work (It will be configured the almost the same as the PIX), can I plug the PIX back into the network as an added measure of precaution?

i'm worried that the switches will see the PIX's IP address however the MAC address will be different.  Will this matter?
0
Comment
Question by:beckredder
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
7 Comments
 
LVL 12

Expert Comment

by:DarinTCH
ID: 40385213
not the best scenario
like a car with 2 steering wheels

there are a few vendors boxes designed to work in harmony with another device like the paloAlto firewalls which
work in a VWire mode - kinda inline if you will
they use this for POC - Proof of concept and then a staged migration

but PIX and ASA i wouldn't
besides you PIX is rather old - ASA has been out for a long while - and should accomplish everything
the PIX does and much more

now that doesn't mean it worthless - maybe could be used in other scenario / location
but running both in a pseudo concurrent situation is asking for extra trouble
0
 

Author Comment

by:beckredder
ID: 40385272
Thanks very much for the feedback.
0
 

Author Comment

by:beckredder
ID: 40386398
Darin, another question in regards to this scenario.

We need to setup 4 vlans in the network, is it advisable to do this at the router or will I have to do it at each switch.

regards,
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:beckredder
ID: 40386399
or both switch and router...
0
 
LVL 12

Accepted Solution

by:
DarinTCH earned 2000 total points
ID: 40386654
depends on which layer u want to communicate layer 2 or layer 3
L2 would be MAC addresses and @ switch
most folks are more comfortable with IP addresses
so L3 is IP @ router

still need to tuen vlan tagging on @ switch if you plan on having all 4 vlans in each switch
802.1q tagging ....will assist with traffic processing throughout the vlans
0
 

Author Comment

by:beckredder
ID: 40394357
Darin, I will be attaching two Cisco 3850s to the ASA 5545 Firewall device.  I would like to add some measure of failover for the 3850's.  Should this stack be redundant? Or should the ports (24*2) be shared?

If I do connect the switch to the two redundant links (1 to each), can we be assured that there are no loops?
0
 

Author Closing Comment

by:beckredder
ID: 40663223
Thanks!
0

Featured Post

Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you are thinking of adopting cloud services, or just curious as to what ‘the cloud’ can offer then the leader according to Gartner for Infrastructure as a Service (IaaS) is Amazon Web Services (AWS).  When I started using AWS I was completely new…
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question