Want to use VLAN sub interfaces on PIX 515

[tangerine0072000]

Hi,
I've heard the PIX can be configured to use VLAN'S with a single interface using 'sub interfaces'.

I would like to get this going with several vlans configured on a catalyst switch !

Does anyone know if this works or have a doc on it ?

thanks,

 

[voltron1011]

I think the only way to get that to work is if you have a FWSM on 6500 chassis. You can declare several interface vlans on the Pix FWSM IOS. The vlans themselves have to be initially configured under the main 6500 IOS, though.

 

[voltron1011]

Correction to my last... It can also be done with the regular PIXs:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/bafwcfg.htm#wp1113411

 

[tangerine0072000]

Thanks for your replies guys.

I don't have anything fancy like a 6500. I was thinking more about creating multiple vlans on a simple catalyst switch like a 2950 etc and then have the firewall sitting on top of those vlans.

 

[tangerine0072000]

Got it working on a PIX 515 and a 2950. Works a treat !

 

[voltron1011]

Good to hear.