It depends how you want the PIX to "listen" on the IPs. You can only assign
one IP address to the external interface, but you can have the PIX "listen"
on other IP address and statically translate them or map them to an internal
device such as a server. For instance:
**Set the outside IP**
ip address outside 192.168.100.1 255.255.255.240
**Set up static translations for the PIX to "listen" on other IPs**
The first entry tells the PIX to "listen" on 192.168.100.2 and when it
receives data on that IP, translate and send the data to the internal IP of
10.0.10.25
The same goes for the second entry only listening on 192.168.100.3
static (inside,outside) 192.168.100.2 10.0.10.25 netmask 255.255.255.255 0 0
static (inside,outside) 192.168.100.3 10.0.10.25 netmask 255.255.255.255 0 0
Hope this helps!
Aaron
----- Original Message -----
From: "Ade" <adrian.bradshaw@gmail.com>
To: <firewalls@securityfocus.com>
Sent: Tuesday, March 14, 2006 2:49 PM
Subject: Pix external inteface and multiple IP address - is it possible?
This may seem like a silly question, but can the external interface of
a PIX (515) have more than one IP address ?
A company Ive been contracted, have a range of IPs and want some
listening on one port and some on another, but do you think I can find
how to assign multiple IPs to the external intrerface?
I have found some forum posts that say its not possible - but surely
that cant be true?
Thanks, Adrian
______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
