topic Re: PIX outside interface multiple IP addresses in Network Security

PIX outside interface multiple IP addresses

sunilyk — Fri, 21 Feb 2020 08:20:11 GMT

Hi,

Is it possible to assign 2 or 3 IP addresses to PIX outside interface? (Just like secondery IP address in case of router FE port.) Is this feature available in new (7.0) os ?

Regards,

Sunil

Re: PIX outside interface multiple IP addresses

sachinraja — Wed, 17 Aug 2005 03:17:54 GMT

Sunil

No . It is not possible. You can create VLANs if required to split up the subnets on the outside interface, but cannot use secondary IPs.

Hope this helps.. all the best.

Raj

Re: PIX outside interface multiple IP addresses

sunilyk — Wed, 17 Aug 2005 03:52:29 GMT

Thanks Raj.

Is it advisable to use same PIX firewall for 2 different ISP's? (By configuring other available FE for 2nd ISP while outside interface for 1st ISP)

Regards,

Sunil

Re: PIX outside interface multiple IP addresses

sachinraja — Wed, 17 Aug 2005 14:34:58 GMT

Sunil,

If the ISP links terminate on two different routers, you cannot have one firewall managing the show. YOu need to have a firewall for each router/ISP, since firewalls can have only one default route, unlike routers.

If both the ISP links terminate on the same router , you can manage connections through them using the same firewall. create nat/.static statements based on the IP addresses of each of these ISPs.

hope this helps. rate replies if found useful...

Raj