Multiple public IP behind PIX 501

Have a question or want to start a discussion? Post it! No Registration Necessary.  Now with pictures!

Threaded View
Hello all

I was reading many posts but I`m still not sure if I can do below
situation on PIX 501:

ISP <---> (public IP 62.bbb.xxx.yyy/30) PIX501 <---> (14 x public IP
62.aaa.zzz.vvv/28)


62.bbb.xxx.yyy/30 <--- carrier network host to host
62.aaa.zzz.vvv/28  <--- usage network for our hosts

So hosts behind PIX (at inside interface) are addressed with public IP
addresses (62.aaa.zzz.vvv/28)

Thanks for answer
Kuba


Multiple public IP behind PIX 501
Hello all

I was reading many posts but I`m still not sure if I can do below
situation on PIX 501:

ISP <---> (public IP 62.bbb.xxx.yyy/30) PIX501 <---> (14 x public IP
62.aaa.zzz.vvv/28)


62.bbb.xxx.yyy/30 <--- carrier network host to host
62.aaa.zzz.vvv/28  <--- usage network for our hosts

So hosts behind PIX (at inside interface) are addressed with public IP
addresses (62.aaa.zzz.vvv/28)

Thanks for answer
Kuba


Re: Multiple public IP behind PIX 501
well, it is actually doable. i've done it before, but

the idea of pix firewall is actually hiding informations from the
outside world. from some suggestions which i received, they actually
recommend me to assign local ip to everything behind the pix firewall
on do a translation to the outside world.

but you can actually do what you are writing above. (not recommending
it though)


Site Timeline