Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a lab project at school and I'm having trouble how I should deploy a PIX 515e device. I'm very new with Cisco ASA/PIX and I don't have the luxury of time to learn it thoroughly. Our group wants to have a DMZ zone for a public web server, mail server and dns server. Is it possible to have a DMZ on transparent mode or do I need to be on routed mode?

If yes, could you please tell me how?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

You will need to have your PIX in routed mode.

If you use transparent mode you are assuming your internal/DMZ/outside network are all on the same layer two network (i.e. same layer two broadcast domain and I do not think this is what you are looking for). In fact, I'm pretty sure that on a PIX you can only have two interfaces per context forming a bridge, not three as it would be required in case you would like to have the three zones in the same L2 domain.

The latest and greatest ASA 8.4 supports more than two interfaces (up two four if my memory services me right) per bridge group per context but this version of the operating systems does not run on PIX hardware.

I would recommend you take a look at this document which describes in excruciating detail what it is required to do to get what you are looking for.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.