Skip to main content

pix 501 and 2950s

More
18 years 6 months ago #14526 by danherbon
pix 501 and 2950s was created by danherbon
hello,

my network currently has a pix 501 and 2 catalyst 2950s on a single 10.10.10.* subnet. the second 2950 is hooked into the first 2950 which is then hooked into the back of the pix firewall. neither 2950 has an ip assigned to it. i would like to assign both of them an ip address so i can use the management options. my question is my network uses no vlans. the commands i've found to ip the 2950:

configure terminal
interface vlan (vlanid)
ip address (ip-address) (subnet-mask)
exit
ip default-gateway (ip-address)
end

the second command calls for a vlanid. this confuses me since i dont have any vlans setup. im confused on what i should do. my goal is to basically ip each 2950.

any help is appreciated.
More
18 years 6 months ago #14527 by d_jabsd
Replied by d_jabsd on topic Re: pix 501 and 2950s
default is vlan 1 so you can use:

int vlan 1
ip address ....

or you can create a new vlan and shut vlan 1 down.


conf t
vlan 2
name new-vlan
int vlan 1
shut
int vlan 2
ip address ...
ip default-gateway ....


don't forget to 'wr mem' or 'copy run start'
More
18 years 6 months ago #14528 by danherbon
Replied by danherbon on topic Re: pix 501 and 2950s
so i can do:

configure terminal
interface vlan 1
ip address (ip) (subnet)
exit
ip default-gateway (ip)
end

on both 2950 but change the ip? so vlan1 would be on both 2950s?
More
18 years 6 months ago #14530 by d_jabsd
Replied by d_jabsd on topic Re: pix 501 and 2950s
yep. that is it. you can use ping to test the gateway.

you will want to be careful if someone may have configured other vlans on them.

use 'sh vlan' and 'sh interface status' to check.

you can check to see if someone may have put an address on them already with 'sh ip alias'
More
18 years 6 months ago #14543 by danherbon
Replied by danherbon on topic Re: pix 501 and 2950s
thanks for the help

i was able to login and see that the switches had DHCP'd ip's. i was able to login to the web interface and set them up with static ips.

all is good! thanks
Time to create page: 0.123 seconds