topic Re: PIX and subnet /31 in Network Security https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391340#M554710 <HTML><HEAD></HEAD><BODY><P>thanks!</P><P>are you sure IPsec tunnel works using a NAT on the router ?</P><P>I'm not able to test it before... so I do not want discover problems later...</P><P></P><P>Greetings</P></BODY></HTML> Mon, 22 Nov 2004 13:16:53 GMT James Lasky 2004-11-22T13:16:53Z PIX and subnet /31 https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391336#M554698 <P>Does anybody know if PIX support /31 subnetting ?</P><P>So 255.255.255.254 ?</P><P></P><P>I saw Version 6.3.3 seems doesn't support it...</P><P></P><P>Pls let me know.</P><P>Tks</P><P></P> Fri, 21 Feb 2020 07:45:32 GMT https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391336#M554698 James Lasky 2020-02-21T07:45:32Z Re: PIX and subnet /31 https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391337#M554701 <HTML><HEAD></HEAD><BODY><P>hello</P><P></P><P>i dont think it supports.. what exactly is your requirement ?? </P><P></P><P>All the best !!!</P></BODY></HTML> Sat, 20 Nov 2004 10:12:37 GMT https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391337#M554701 sachinraja 2004-11-20T10:12:37Z Re: PIX and subnet /31 https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391338#M554704 <HTML><HEAD></HEAD><BODY><P>Since I understood from a previus post that PIX doesn't support loopback interface (with the purpose to open IPsec tunnels), I have to save piblic ip addressing to connect my router to the outside customer PIX. </P><P>If I give it a /31 I save 2 ip addresses versus a /30...</P></BODY></HTML> Mon, 22 Nov 2004 08:09:53 GMT https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391338#M554704 James Lasky 2004-11-22T08:09:53Z Re: PIX and subnet /31 https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391339#M554707 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>If the PIX outside has a private IP, do a static NAT for the PIX outside IP to a public IP on the internet router (connected to outside PIX).. this can enable you to connect your router to his PIX , through IPSEC....</P><P>you cannot have /31's on PIX. i dont think it will work. the above soultion will work and best suited for your scenario..</P><P></P><P>All the best. .. rate all replies if found useful...</P></BODY></HTML> Mon, 22 Nov 2004 13:00:36 GMT https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391339#M554707 sachinraja 2004-11-22T13:00:36Z Re: PIX and subnet /31 https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391340#M554710 <HTML><HEAD></HEAD><BODY><P>thanks!</P><P>are you sure IPsec tunnel works using a NAT on the router ?</P><P>I'm not able to test it before... so I do not want discover problems later...</P><P></P><P>Greetings</P></BODY></HTML> Mon, 22 Nov 2004 13:16:53 GMT https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391340#M554710 James Lasky 2004-11-22T13:16:53Z Re: PIX and subnet /31 https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391341#M554712 <HTML><HEAD></HEAD><BODY><P>yes.. ipsec tunnel will work , if a nat is done on the router, in case the PIX outside is private, and you want to terminate the IPSEC tunnel on the PIX... i have tested this before and is working live in one of my customers network now...</P><P></P><P>All the best.. thanks...</P></BODY></HTML> Mon, 22 Nov 2004 13:54:57 GMT https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391341#M554712 sachinraja 2004-11-22T13:54:57Z Re: PIX and subnet /31 https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391342#M554713 <HTML><HEAD></HEAD><BODY><P>Thanks to u!</P><P>have a nice evening</P><P>Ric</P></BODY></HTML> Mon, 22 Nov 2004 14:27:17 GMT https://community.cisco.com/t5/network-security/pix-and-subnet-31/m-p/391342#M554713 James Lasky 2004-11-22T14:27:17Z