As long as the upstream router routes the traffic to your PIX for the
second class C IP addresses. You don't have to do any VLANing. It's
like adding the secondary IP addresses on the outside interface of
the PIX. It will just work so long as you have statics or NAT that
uses that second class IP addresses.
Andrew,
On Mar 15, 2006, at 6:24 AM, MOYA Yves wrote:
hello,
I've same problem with a 515E
can I set the outside IP multiple range ?
ip address outside 192.168.100.1 255.255.255.0
and at same time
ip address outside 192.168.200.1 255.255.255.0 ?
I want to do that because my company bought 2 range of public
address that are disjoined
I try VLAN, didn't work...
thanks,
Yves
De: Aaron Rohyans [mailto:aaronr@imcu.com]
Date: mar. 14/03/2006 21:58
À: firewalls@securityfocus.com
Objet : Re: Pix external inteface and multiple IP address - is it
possible?
It depends how you want the PIX to "listen" on the IPs. You can
only assign
one IP address to the external interface, but you can have the PIX
"listen"
on other IP address and statically translate them or map them to an
internal
device such as a server. For instance:
**Set the outside IP**
ip address outside 192.168.100.1 255.255.255.240
**Set up static translations for the PIX to "listen" on other IPs**
The first entry tells the PIX to "listen" on 192.168.100.2 and when it
receives data on that IP, translate and send the data to the
internal IP of
10.0.10.25
The same goes for the second entry only listening on 192.168.100.3
static (inside,outside) 192.168.100.2 10.0.10.25 netmask
255.255.255.255 0 0
static (inside,outside) 192.168.100.3 10.0.10.25 netmask
255.255.255.255 0 0
Hope this helps!
Aaron
----- Original Message -----
From: "Ade" <adrian.bradshaw@gmail.com>
To: <firewalls@securityfocus.com>
Sent: Tuesday, March 14, 2006 2:49 PM
Subject: Pix external inteface and multiple IP address - is it
possible?
This may seem like a silly question, but can the external interface of
a PIX (515) have more than one IP address ?
A company Ive been contracted, have a range of IPs and want some
listening on one port and some on another, but do you think I can find
how to assign multiple IPs to the external intrerface?
I have found some forum posts that say its not possible - but surely
that cant be true?
Thanks, Adrian
______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
=
___________________________________
This email and any files transmitted with it are intended solely for the
recipient. If you are not the named addressee you should not disseminate,
distribute, copy or alter this email.
All messages are processed to reduce Viruses.
