topic Re: Cable Modem + Router + Pix in Network Security

Cable Modem + Router + Pix

antinea — Fri, 21 Feb 2020 06:36:27 GMT

Dear All,

Here's my problem:

I have a cable ADSL modem supplied by my ISP.

The ethernet cable is connected to ethernet 0 in my cisco 2621.

Router Ethernet 1 is directly connected to ethernet 0 (outside) of my pix 506E

Pix's ethernet 1 (inside) is connected to my backbone switch 3550 over a dedicated port VLAN

The pix is configured with nat.

My ISP gave me 6 external internet addresses. (/48)

One is given to the cable modem (configured remotely by the ISP)

one is given to the (external) ethernet 0 of the router

one is given to outside of the pix.

The problem is how to configure the router's interfaces since I don't want to configure nat between its interfaces and the (internal) ethernet 1 connected to the pix should be an internet address like ethernet 0.

Any solution is highly appreciated.

Thank you in advance,

Samir

Re: Cable Modem + Router + Pix

syghafoor — Sat, 08 Mar 2003 07:28:33 GMT

Hi Samir,

I am little unclear about the whole setup. Can you please elaborate with respect to the ip addresses? Your ISP has given you 6 ip addresses one is assigned to the e0 of the router. What is the ip address you are using for e1 of the router?

for e.g

modem----------router-------------pix----switch

.1 .2 ? ? ?

Regards,

Syed

Re: Cable Modem + Router + Pix

antinea — Sat, 08 Mar 2003 18:10:39 GMT

Hello Syed,

First thank you for your reply.

Here's what's working now:

modem---------------------router-----------------------------switch(3550)-------------LAN

193.95.16.17 16.18 192.168.22.2 22.1 192.168.21.1 21.0

What I want to do:

modem---------------------router----------------------pix-------------switch

Please what ip addresses should I configure on ethernet interfaces of all devices taking the following in mind:

- router: Cisco 2621 12.2 with NM-8AM module (for dial in access)

- pix: 506E (6.22 image and 2.1 PDM)

- switch: 3550 with EI

- LAN: this is my DMZ 192.168.21.0 (from DMZ to LAN there's ISA server - working fine)

- Internet IP @: 193.95.16.16/29

- I want to publish my pix internet address for VPN access

- Also I want to publish a web server which is in the DMZ (LAN here)

IP @ Recap:

ADSL Modem (to internet) : 193.95.16.17/29

Router :

FastEth0 (to ADSL modem) 193.95.16.18/29

FastEth1 (to switch) 192.168.22.2/24

Switch:

Multiple VLANS

DMZ VLAN: 192.168.22.1/24 (connected to router) and default route

Many thanks in advance.

Samir