Media for Basic network problem/question: PIX 506E

Basic network problem/question: PIX 506E

I'm setting up a pix 506E to do firewall, NAT, and VPN for my office. I am trying to work in stages, getting the network functional in this order:

Stage 1) Basic inside to outside services: http, ssh, etc. from inside out. Stage 2) Incoming services: http, https, and ssh from the outside to the right place inside. Stage 3) VPN. People working at home can work as if they are in the office.

Here is the network:

internet | perimeter router w/DSL (cisco 2801) | PIX 506E | internal network

We have 5 static IP's from SBC: xx.xx.xx.98 thru xx.xx.xx.102.

I got a basic configuration for stage 1 working this way:

router outside IP: xx.xx.xx.102 router inside IP: xx.xx.xx.98 PIX outside IP: xx.xx.xx.99 PIX inside IP: 192.168.0.1

First problem: I don't want to burn 2 of my public IP addresses on the little subnet between the router and the PIX. I originally used

192.168.200.1 and 192.168.200.2 but I had problems getting things working. From the PIX, I could not ping any outside internet addresses that way. With the public IP's, I can.

So, just working on stage 1 for the moment: what do I need to do, either in the router or the PIX, so I can use private IP numbers on the network between the router and the PIX?

Here is the PIX configuration:

PIX Version 6.3(3) interface ethernet0 auto interface ethernet1 auto nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password ******** encrypted passwd ******** encrypted hostname pixfw domain-name ********.*** clock timezone CT -6 fixup protocol dns maximum-length 512 fixup protocol ftp 21 fixup protocol h323 h225 1720 fixup protocol h323 ras 1718-1719 fixup protocol http 80 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp 5060 fixup protocol skinny 2000 fixup protocol smtp 25 fixup protocol sqlnet 1521 fixup protocol tftp 69 names object-group icmp-type icmp_traffic icmp-object echo-reply icmp-object source-quench icmp-object unreachable icmp-object time-exceeded access-list PERMIT_IN permit icmp any any object-group icmp_traffic pager lines 68 icmp permit any outside icmp permit any inside mtu outside 1500 mtu inside 1500 ip address outside xx.xx.xx.98 255.255.255.0 ip address inside 192.168.0.1 255.255.255.0 ip audit info action alarm ip audit attack action alarm pdm logging informational 100 pdm history enable arp timeout 14400 global (outside) 1 xx.xx.xx.98 nat (inside) 1 192.168.0.0 255.255.255.0 0 0 timeout xlate 0:05:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00 timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout uauth 0:05:00 absolute aaa-server TACACS+ protocol tacacs+ aaa-server RADIUS protocol radius aaa-server LOCAL protocol local no snmp-server location no snmp-server contact snmp-server community public no snmp-server enable traps floodguard enable telnet timeout 5 terminal width 80 Cryptochecksum:*****