[c-nsp] Vlans + PIX 515

[Brian Desmond]

Yeah you need to trunk the port on the switch

Interface FastEthernet0/1
	switchport mode trunk
	switchport trunk encapsulation dot1q
	switchport trunk allowed vlans xxx,yyy


Thanks,
Brian Desmond
brian at briandesmond.com

c - 312.731.3132

> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-
> bounces at puck.nether.net] On Behalf Of Eusebio López
> Sent: Thursday, September 21, 2006 12:30 PM
> To: Amol Sapkal; Shakeel Ahmad
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] Vlans + PIX 515
> 
> Thank you very much. It already works.
> 
> A last question. I am using a Cisco catalyst. I have defined 2 vlans.
> 
> Could I have a same port in several Vlan´s?
> 
> Cheers.
> 
> 
> -----Mensaje original-----
> De: Amol Sapkal [mailto:amolsapkal at gmail.com]
> Enviado el: miércoles, 20 de septiembre de 2006 16:07
> Para: Shakeel Ahmad
> CC: Eusebio López; cisco-nsp at puck.nether.net
> Asunto: Re: [c-nsp] Vlans + PIX 515
> 
> HI,
> 
> On 9/20/06, Shakeel Ahmad <shakeelahmad at gmail.com> wrote:
> > prepare this interface as a trunk and there you go - you can have multiple
> > virtual interfaces (related to VLAN) on your PIX - number of interfaces
> > depends on your liscence.
> >
> 
> If I am not wrong, you need not specify the PIX interface as a trunk
> (there is no such command, AFAIK). What is needed is to convert the
> uplink port to the switch as a trunking port.
> 
> Eusebio,
> 
> The config is as simple as:
> 
> interface ethernet2 vlan100 physical
> interface ethernet2 vlan200 logical
> !
> nameif vlan100 XYZ securityXX
> nameif vlan200 ABC securityYY
> !
> 
> HTH,
> Amol
> 
> 
> >
> >
> >
> >
> > On 9/20/06, Eusebio López <eusebio at palmanet.net> wrote:
> > >
> > > hi,
> > >
> > >
> > >
> > > I have PIX 515 and in one of the interfaces I am remaining without IP´s
> > > directions.
> > >
> > >
> > >
> > > Could I form a different address in same interface creating 2 vlans in
> > > pix?
> > >
> > >
> > >
> > > Cheers.
> > >
> > > _______________________________________________
> > > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > > archive at http://puck.nether.net/pipermail/cisco-nsp/
> > >
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
> 
> 
> --
> Warm regards,
> 
> Amol Sapkal
> 
> -------------------------------------------------------------------
> "When I'm not in my right mind, my left mind
> gets pretty crowded"
> -------------------------------------------------------------------
> 
> 
> 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/