I have a Cisco PIX Firewall (as well as a PIX failover unit). I have designated 3 of its interfaces as:
alpha
beta
gamma
I have 6 servers in a SuperBlade with a SBM-GEM-001 Switch.
I want the first 2 blade systems to be in a VLAN for alpha.
I want the next 2 blade systems to be in a VLAN for beta.
I want the last 2 blade systems to be in a VLAN for gamma.
I tried to create the following VLANs:
Ports 1,2,11,12 (firewall, failover firewall, system 1, system 2)
Ports 3,4,13,14 (same but systems 3,4)
Ports 5,6,15,16 (same but systems 5,6)
I can only ever seem to ping the firewalls alpha interface (that is I can get the first VLAN apparently set up). However the beta and gamma never work. Is port 1 perhaps not supposed to be used like maybe some kind of uplink port meant to connect to another switch, not a firewall?
First of all, we assume the LAN port of each blade sever does not have VLAN enabled.
There are two possibilities for the links between the Cisco switch and the Supermicro switch - tagged and untagged.
(A) If traffic from Cisco interface to switch is untagged (That means the Cisco interface type is Access):
Create 3 VLANs as following:
VLAN 2: member ports - 1,2,11,12 all untagged
VLAN 3: member ports - 3,4,13,14 all untagged
VLAN 4: member ports - 5,6,15,16 all untagged
Configure PVID on each port as following:
Port PVID
----- ------
1 2
2 2
3 3
4 3
5 4
6 4
11 2
12 2
13 3
14 3
15 4
16 4
(B) If the Cisco interface type is Trunk and alpha is VLAN2, beta is VLAN3 and gamma is VLAN4, then the blade switch configuration becomes:
VLAN 2: member ports - 1 and 2 - tagged, 11 and 12 - untagged
VLAN 3: member ports - 3 and 4 - tagged, 13 and 14 - untagged
VLAN 4: member ports - 5 and 6 - tagged, 15 and 16 - untagged
PVID configuration:
Port PVID
----- ------
11 2
12 2
13 3
14 3
15 4
16 4
Print
Share