RE: Pix external inteface and multiple IP address - is it possible?

The way to do it is with vlan.   You can assign multiple ipaddress/range to
a single interface but must do it using vlan and that means you also need a
vlan switch to connect the interface to be able to decode the tagged
packets.   The other alternative is to use one of the other interfaces for
the second external ipaddress/range and set a security level of 99.   I have
done this in the past and it works fine, just slightly more complicated to
setup.



-----Original Message-----
From: Ade [mailto:adrian.bradshaw@gmail.com] 
Sent: Wednesday, 15 March 2006 6:20 AM
To: firewalls@securityfocus.com
Subject: Pix external inteface and multiple IP address - is it possible?

This may seem like a silly question, but can the external interface of
a PIX (515) have more than one IP address ?

A company Ive been contracted, have a range of IPs and want some
listening on one port and some on another, but do you think I can find
how to assign multiple IPs to the external intrerface?

I have found some forum posts that say its not possible - but surely
that  cant be true?

Thanks, Adrian