Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: pix 501 and 2950s

pix 501 and 2950s 10 years 4 months ago #14526

  • danherbon
  • danherbon's Avatar
  • Offline
  • Frequent Member
  • Posts: 24
  • Karma: 0
hello,

my network currently has a pix 501 and 2 catalyst 2950s on a single 10.10.10.* subnet. the second 2950 is hooked into the first 2950 which is then hooked into the back of the pix firewall. neither 2950 has an ip assigned to it. i would like to assign both of them an ip address so i can use the management options. my question is my network uses no vlans. the commands i've found to ip the 2950:

configure terminal
interface vlan (vlanid)
ip address (ip-address) (subnet-mask)
exit
ip default-gateway (ip-address)
end

the second command calls for a vlanid. this confuses me since i dont have any vlans setup. im confused on what i should do. my goal is to basically ip each 2950.

any help is appreciated.
The administrator has disabled public write access.

Re: pix 501 and 2950s 10 years 4 months ago #14527

  • d_jabsd
  • d_jabsd's Avatar
  • Offline
  • Distinguished Member
  • Posts: 153
  • Karma: 0
default is vlan 1 so you can use:

int vlan 1
ip address ....

or you can create a new vlan and shut vlan 1 down.


conf t
vlan 2
name new-vlan
int vlan 1
shut
int vlan 2
ip address ...
ip default-gateway ....


don't forget to 'wr mem' or 'copy run start'
The administrator has disabled public write access.

Re: pix 501 and 2950s 10 years 4 months ago #14528

  • danherbon
  • danherbon's Avatar
  • Offline
  • Frequent Member
  • Posts: 24
  • Karma: 0
so i can do:

configure terminal
interface vlan 1
ip address (ip) (subnet)
exit
ip default-gateway (ip)
end

on both 2950 but change the ip? so vlan1 would be on both 2950s?
The administrator has disabled public write access.

Re: pix 501 and 2950s 10 years 4 months ago #14530

  • d_jabsd
  • d_jabsd's Avatar
  • Offline
  • Distinguished Member
  • Posts: 153
  • Karma: 0
yep. that is it. you can use ping to test the gateway.

you will want to be careful if someone may have configured other vlans on them.

use 'sh vlan' and 'sh interface status' to check.

you can check to see if someone may have put an address on them already with 'sh ip alias'
The administrator has disabled public write access.

Re: pix 501 and 2950s 10 years 4 months ago #14543

  • danherbon
  • danherbon's Avatar
  • Offline
  • Frequent Member
  • Posts: 24
  • Karma: 0
thanks for the help

i was able to login and see that the switches had DHCP'd ip's. i was able to login to the web interface and set them up with static ips.

all is good! thanks
The administrator has disabled public write access.
Time to create page: 0.078 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup