Здравствуйте,
Вопию к вашему коллективному разуму, уже с неделю страдаю :-(
далее следует описание проблемы, так как оно было отправлено в support
Cisco и Foundry, сразу скажу, что они мне не ответили, так как я не знаю
CustomerSupportID, а человек который его знает(хозяин компании) - временно
вне моей досягаемости.
---cut---
My primary task is to put one machine from our network under PIX515
protection.
The following are the steps I've done with some comments:
On our cisco2950:
Cisco Internetwork Operating System Software
IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(13)EA1, RELEASE
SOFTWARE (fc1)
Copyright (c) 1986-2003 by cisco Systems, Inc.
Compiled Tue 04-Mar-03 02:14 by yenanh
Image text-base: 0x80010000, data-base: 0x805A8000
I have configured the following interface.
interface FastEthernet0/11
switchport access vlan 12 ######################## vlan 12 is for PIX
access.
switchport mode access
no ip address
ip access-group 100 in
load-interval 30
no cdp enable
On our Foundry BigIron
SW: Version 07.7.01eT53 Copyright (c) 1996-2004 Foundry Networks, Inc.
Compiled on Sep 23 2004 at 21:36:51 labeled as B2R07701e
(2968660 bytes) from Primary foundry/B2R07701e.bin
HW: BigIron 8000 Router, SYSIF version 21, Serial #: Non-exist
I have configured the following vlan
vlan 12 name PIX(inside) by port
tagged ethe 5/2 ethe 5/8 ethe 5/11
untagged ethe 5/48
router-interface ve 12
and the following router interface:
interface ve 12
ip access-group 100 in
ip follow ve 3
no ip redirect
in Pix 515 i have the following command:
access-list 100 permit ip any host aaa.bbb.ccc.ddd
now, once I set the above configuration, I have no access to the host.
if I set "switchport access vlan 3",(on 2950) which is the default access
vlan for all our hosts, it all works properly.
How can I set this up properly?
perhaps I am missing somethig from my snippets, but you can ask me to show
you anything.
Thank you very much.
---cut---
--
With best regards,
Gregory Edigarov
===================================================================
uanog mailing list.
To Unsubscribe: send mail to majordomo(a)uanog.kiev.ua
with "unsubscribe uanog" in the body of the message
