I need to put an FTP server in a DMZ using a Pix 506e. Can someone point me to some configuration examples. The 506e has only 2 physical interfaces so the DMZ will have to be on a vlan, but most examples I have seen were written for Pix's with additional physical interfaces. I am having trouble wrapping my feeble mind around the concept. Thanks.
Re: Pix 506e and DMZ
11 years 11 months ago #19716
Sorry but i have not tried this before. Appart from setting this up using two firewalls and creating a DMZ between them, the only other thing is to configure it using 802.1q trunk to send over two VLAN's to a VLAN Switch.
This way you can segment the traffic into two VLAN's and route the traffic in this manor using virtual interfaces. sorry i have not tried this config though, maybe someone else can advise on the steps
I have pulled this off Cisco's site which supports my idea
"VLAN-based virtual interfaces:
· Provides increased flexibility when defining security policies and eases overall integration into switched network environments by supporting the creation of logical interfaces based on IEEE 802.1q VLAN tags, and the creation of security policies based on these virtual interfaces
· Supports multiple virtual interfaces on a single physical interface through VLAN trunking, with support for multiple VLAN trunks per Cisco PIX Security Appliance
· Supports up to 2 VLANs on a Cisco PIX 506E Security Appliance, providing a low-cost DMZ-enabled security solution that enables businesses to securely host Web servers, e-mail servers, and other services with the Internet or extranet environments"