Connecting two Cisco PIX 515 as per following Picture

Mar 01, 2006 3 Replies
Connecting two Cisco PIX 515 as per following Picture open original image

Hi,



I would like to be able to setup a network as per this picture.



(1) Is it possible ? (2) How do I setup config for pc's in inside of FW1 to inside of FW2 etc ?



formatting link


yes it is

do you need inside to inside access or do you need access to other segments aswell ? The best way is to create LAN-to-LAN tunnel between the two PIX firewalls

HTH Martin Bilgrav

You can also do

--left firewall

static (inside,DMZ2) 192.168.0.0 192.168.0.0 255.255.255.0 0.0 route DMZ2 192.168.1.0 255.255.255.0 192.168.2.5

-- right firewall

static (inside,DMZ1) 192.168.1.0 192.168.1.0 255.255.255.0 0.0 route DMZ1 192.168.0.0 255.255.255.0 192.168.2.1

then proper access-list filtering

Hi, Thank you for the information. There will be a need to be able to access different segments with certain ports. For Example.

(1) Need to be able to SSH from Internet to 192.168.4.6 on DMZ 4, and Inside (192.168.1.0) of FW2(Right Hand) (2) Most of the data that needs to go between the two is all internet based. ie a pc inside FW1 connects to web server in DMZ3 on FW2 and Admin Server inside FW2 (3) The servers in DMZ3 and Inside of FW 2 talk to each other via certain ports

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required