| 9.6 |  | Multiple Interfaces on the PIX Security Appliance |
| 9.6.3 |  | Configuring four interfaces on a PIX Security Appliance |

| In Figure , the PIX Security Appliance has four interfaces. Users on all interfaces have access to all servers and hosts, which include inside, outside, DMZ, and Partnernet. Configuring four interfaces requires more attention to detail, but they are configured with standard PIX Security Appliance commands. To enable users on a higher security level interface to access hosts on a lower security interface, use the nat and global commands. For example, use these commands when users on the inside interface have access to the Web server on the DMZ interface.

To let users on a lower security level interface, such as the Partnernet interface, use the

static and conduit commands. The static and conduit commands will also be used to access hosts on a higher security interface, such as the DMZ. As shown in Figure , the Partnernet has a security level of 40, and the DMZ has a security level of 50. The DMZ will use nat and global commands to speak with the Partnernet and will use static and conduit commands to receive traffic from the Partnernet.

| Lab Activity Lab Exercise 1: Configure Multiple Interfaces In this lab exercise, the student will configure three PIX interfaces and configure the interface to provide for access through the PIX Security Appliance.

| Lab Activity Lab Exercise 2: Configure Access Through the PIX Security Appliance In this lab exercis e, students configure a PIX Security Appliance to protect an enterprise network from Internet access.

| Lab Activity e-Lab Activity: Configuring Four Interfaces In this activity, the student will practice configuring four interfaces on the PIX Security Appliance.