<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: router behind pix in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/router-behind-pix/m-p/324910#M549495</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;yes, inside part of pix command must be it's interface ip. &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Fri, 15 Apr 2005 18:36:48 GMT</pubDate>
    <dc:creator>umedryk</dc:creator>
    <dc:date>2005-04-15T18:36:48Z</dc:date>
    <item>
      <title>router behind pix</title>
      <link>https://community.cisco.com/t5/network-security/router-behind-pix/m-p/324909#M549479</link>
      <description>&lt;P&gt;hi&lt;/P&gt;&lt;P&gt;first----&amp;gt; thanx for your helps&lt;/P&gt;&lt;P&gt;second---&amp;gt;i have a network like this:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;			&lt;/P&gt;&lt;P&gt;         DMZ   CAFE-NET   &lt;/P&gt;&lt;P&gt;          |         |&lt;/P&gt;&lt;P&gt;          |         |&lt;/P&gt;&lt;P&gt;          |         |                            &lt;/P&gt;&lt;P&gt;LAN---ISA----as5350---pix---2600---DSL---INTERNET&lt;/P&gt;&lt;P&gt;               |&lt;/P&gt;&lt;P&gt;               |		    &lt;/P&gt;&lt;P&gt;	       |&lt;/P&gt;&lt;P&gt;	       |&lt;/P&gt;&lt;P&gt;	REMOTE ACCESS	 	&lt;/P&gt;&lt;P&gt;                                                    &lt;/P&gt;&lt;P&gt;as5350 has tw0 interface &lt;/P&gt;&lt;P&gt;pix has two interface&lt;/P&gt;&lt;P&gt;2600 has one interface &lt;/P&gt;&lt;P&gt;i deploy the back-to back topology,and i wanna to assign (DMZ,CAFE-NET,REMOTE ACCESS) the &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;different ip ranges as(172.16.0.0/16,192.168.1.0/24,10.0.0.0/8)and my isa is in DMZ.&lt;/P&gt;&lt;P&gt;i use nat for remote access with the help of secondary ip.&lt;/P&gt;&lt;P&gt;but i want to now if i can use STATIC command in pix to accept incoming request for&lt;/P&gt;&lt;P&gt;DMZ SERVERS.i heard that inside part of pix command must be it's interface ip.&lt;/P&gt;&lt;P&gt;can i route this static to as5350 and then dmz?how?&lt;/P&gt;&lt;P&gt;another question:&lt;/P&gt;&lt;P&gt;can i use secondary ip in as5350 to do this: &lt;/P&gt;&lt;P&gt;peer default ip address pool sh10&lt;/P&gt;&lt;P&gt;ip local pool sh10 10.0.0.20 10.0.0.80&lt;/P&gt;&lt;P&gt;badly,i test it it does not work: i mean router can not route between secondary and primary ip &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;thanx for your help...&lt;/P&gt;</description>
      <pubDate>Fri, 21 Feb 2020 08:04:06 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/router-behind-pix/m-p/324909#M549479</guid>
      <dc:creator>esy_conft</dc:creator>
      <dc:date>2020-02-21T08:04:06Z</dc:date>
    </item>
    <item>
      <title>Re: router behind pix</title>
      <link>https://community.cisco.com/t5/network-security/router-behind-pix/m-p/324910#M549495</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;yes, inside part of pix command must be it's interface ip. &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 15 Apr 2005 18:36:48 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/router-behind-pix/m-p/324910#M549495</guid>
      <dc:creator>umedryk</dc:creator>
      <dc:date>2005-04-15T18:36:48Z</dc:date>
    </item>
  </channel>
</rss>

