Routed mode to Transparent Mode in PIX 515

[rjohn2223]

Hello Cisco Gurus,

I need to know how to change the Routed mode in pix 515 to Transparent mode.

I am trying to provide firewall security to some servers without changing their ip's. I have assigned a public ip to Ethernet 0 on cisco pix and when i try to assign another public ip(from the same subnet) to the Ethernet 1, it tells me that the ip's cann't overlap.

Please help

Jenefa

 

[jarmand]

A quick Google turned up:

PIX/ASA: Transparent Firewall Configuration Example

http://www.cisco.com/en/US/products...s_configuration_example09186a008089f467.shtml

 

[hgate73]

rjohn2223,

If the Pix is in Transparent mode, you shouldn't be assigning IP address to the interfaces, as that defeats the purpose of transparent mode.

In routed mode, you cannot have both Interfaces in the same subnet - that defeats the purpose of routing.

You CAN assign an IP address to the Pix itself, for managing it remotely. This is done from global configuration mode.

An example would be:

pix(config)# ip address 192.168.1.1 255.255.255.0

Remember when you switch to Transparent mode, the Pix resets all the interfaces, so you'll need to go through and name and re-open (no shut) them again.

 

[rjohn2223]

When i use the CLI to change the mode to 'firewall transparent' The Pix does not respond and i get a message that the connection is lost.

Any ideas. should i do something before i change modes.

Thanks for the help.

 

[NetworkGhost]

You need to do this from console and not over the network. You may want to read up on the transparent firewall feature and how it works before configuring.

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/fwmode.html#wp1201980

http://www.wr-mem.com

 

[rjohn2223]

Thank you NetworkGhost and All who responded to my question.

That solved my problem.
I was able to change the mode to transparent.
Thanks for the url also. very informative.

Jenefa