Pat,

You can use a seperate hub or switch outside the PIX, or if the switch on
the inside has a lot of available ports you could make another VLAN on it
and have the new VLAN active on three ports; one for the ISP and one for
each switch.

Dave Swink

> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> pat
> Sent: Sunday, January 28, 2001 1:42 AM
> To: [EMAIL PROTECTED]
> Subject: PIX in parallel with another appliance box
>
>
> Hello,
>
>    My PIX is sitting directly on the internet. The
> cat5 connection from ISP is connected to external
> (ethernet) inerface of PIX. The inside(ethernet)
> interface is conneted to switch. From this switch
> internal network is connected. I have another Firewall
> appliance with 2 ethernet inerface which needs to be
> connected in parallel to PIX. Can anybody give some
> hints as how these connections are to made? I am
> thinking just to connect ISP connection to an ordinary
> hub & from there take two connections to outside
> interface for both firewall. Connect inside interface
> of both firewall to same switch. Is this right way of
> doing it? My only concern is can both outside
> interface of firewall be connected on on same hub? In
> fact External IPs for both & default gateway fall in
> same subnet. OR is there a requirement of any kind of
> a router or switch?
>
> Both firewalls need to be in parallel. One can't sit
> behind other OR can't be in DMZ of other.
>
> Thanks a lot for any advices.......
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Auctions - Buy the things you want at great prices.
> http://auctions.yahoo.com/
>
> _________________________________
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>

_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to