Cisco Systems basic vlan pix 6.3 question

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
basic vlan pix 6.3 question sillymartin 07-25-06
Posted by on July 25, 2006, 2:26 am
Please log in for more thread options
hi,
i've been playing around with vlans.
i simply configured a vlan with an adress range, that's not i use yet.

"interface intf3 vlan3 logical"

it seems to work:
interface vlan3 "intf3" is up, line protocol is up
Hardware is i82559 ethernet, address is 0002.b3ec.4ce8
IP address 192.168.100.1, subnet mask 255.255.255.0
MTU 1500 bytes, BW 10000 Kbit half duplex
0 packets input, 0 bytes
1 packets output, 46 bytes

i attached a laptop to the physical if and configured my nic in the
same subnet, allowed telnet from that host.

i can not ping, telnet or anything to the pix.
i do debug, capture , logg via console and don't see a single packet
arriving at the pix.

any ideas


Posted by AM on July 25, 2006, 7:24 pm
Please log in for more thread options
sillymartin@gmail.com wrote:
> hi,
> i've been playing around with vlans.
> i simply configured a vlan with an adress range, that's not i use yet.
>
> "interface intf3 vlan3 logical"
>
> it seems to work:
> interface vlan3 "intf3" is up, line protocol is up
> Hardware is i82559 ethernet, address is 0002.b3ec.4ce8
> IP address 192.168.100.1, subnet mask 255.255.255.0
> MTU 1500 bytes, BW 10000 Kbit half duplex
> 0 packets input, 0 bytes
> 1 packets output, 46 bytes
>
> i attached a laptop to the physical if and configured my nic in the
> same subnet, allowed telnet from that host.
>
> i can not ping, telnet or anything to the pix.
> i do debug, capture , logg via console and don't see a single packet
> arriving at the pix.

That's correct. The PIX expects any packet coming to the interfacec intf3 to be
tagged accordingly
to 802.1q protocol.
Basically you can think about the intf3 of the PIX like a trunking port of a
switch

I don't think your laptop can manage trunk link on its interface.
Maybe some linux boxes with specific software/kernel options.

So take out a switch with trunking ports and connect that port to intf3.

HTH Alex.

>
> any ideas
>

Posted by on July 27, 2006, 2:56 am
Please log in for more thread options


> So take out a switch with trunking ports and connect that port to intf3.
>
> HTH Alex.


i got a catalyst 3550 here , i know it supports vlan tagging and
trunking but :
what do I need to configure on that port?
how do i do it?

yeah , i've heard of google :-)
but some hints would be nice

thanks a lot


Posted by on August 1, 2006, 9:16 am
Please log in for more thread options

sillymartin@gmail.com schrieb:

> > So take out a switch with trunking ports and connect that port to intf3.
> >
> > HTH Alex.
>
>
> i got a catalyst 3550 here , i know it supports vlan tagging and
> trunking but :
> what do I need to configure on that port?
> how do i do it?
>
> yeah , i've heard of google :-)
> but some hints would be nice
>
> thanks a lot

allright, figured it out:
between pix and switch switchport trunk mode with dot1q
encapsulation,allow vlan 3
between switch and laptop switchport access mode

S


Similar ThreadsPosted
basic vlan pix 6.3 question July 25, 2006, 2:26 am
Basic VLAN question. June 27, 2005, 12:21 pm
VLAN basic question March 2, 2007, 10:40 am
Basic IOS question September 6, 2005, 4:03 pm
VRF basic question. September 4, 2006, 12:02 pm
Cisco Pix 501 basic VPN question February 11, 2005, 8:25 pm
basic ospf question! May 13, 2006, 3:54 pm
Basic Routing question June 21, 2005, 5:37 pm
basic nonat question pix September 6, 2006, 4:37 am
Basic Firewall Question September 16, 2006, 3:18 pm
Voice Lab Basic Question September 21, 2006, 12:43 pm
Basic ACL Question - Outbound Traffic April 30, 2006, 2:18 am
Basic 1760 setup question August 4, 2006, 10:36 am
Basic network problem/question: PIX 506E February 9, 2005, 9:03 pm
spanning tree - looping basic question October 1, 2006, 12:37 pm