topic Re: Adding additional interface to PIX 515e in Network Security

Adding additional interface to PIX 515e

brandont — Fri, 21 Feb 2020 08:19:05 GMT

I am needing to add an additional interface to our PIX 515e to access a frame line. I have added the following lines:

interface ethernet2 auto /

ip address intf2 x.x.x.x.210 255.255.255.248 /

route intf2 204.x.x.0 255.255.255.0 x.x.x.209 1

I am sure I am missing something... I need the inside network able to access the internet through the outside network and then access this network also for one app. I feel I am missing a global statement and/or a nat statement but I am not sure how it should be worded. I would appreciate any help.

Thanks!

Re: Adding additional interface to PIX 515e

mehrdad — Tue, 09 Aug 2005 03:57:50 GMT

I'm not sure that I understood your question but please see below :

- If your inside network is using private IP addresses

nat (inside) 1 0 0

global (outside) 1 interface

* you can be able to use access-list or subnet at nat command to specify your private network precisely.

for instance :

access-list 101 permit ip local_ip local_mask any

nat (inside) 1 access-list 101

global (outside) 1 interface

- if your inside network is using public IP addresses

nat (inside) 0 204.x.x.0 255.255.255.0

I hope it was useful

Regards,

Mehrdad Arshad Rad

Re: Adding additional interface to PIX 515e

rsmith — Fri, 12 Aug 2005 16:11:34 GMT

In addition to the previous post, to access the new interface, assuming you already have a nat(inside) 1 0 0 (or similar), you need to add a global statement for your new network:

global (intf2) 1 interface.

This will allow access from the inside to the new intf2 network.