I'm using FR for Private WAN 1PVC and setting up Frame to IP (Internet) another PVC on the same access ckt. I need to firewall the internet portion. I have a 2620xm with one Fa port and one Serial WAN port.
How can I accomplish this? My firewall guy says we shouldn't run all traffic thru the PIX. I suggested another Fa MOD, he says it won't help, I think he's wrong. We can route all traffic from one Sub-intfc out one Fa port and the other sub out another port, right?
He says we need two different IP schemes from the provider (ISP) one for inside interface (public) and one for outside sub-intfc (public also) So what?
Can anyone lend their expertise? I'm a WAN guy, not very firewall savvy.
A scapegoat is often as welcome as a solution...never memorize what you can look up.
