https://community.cisco.com/t5/network-security/multiple-subnets-coming-into-pix/m-p/40925#M627296 <HTML><HEAD></HEAD><BODY><P>yes, the pix does not require its outside interface to be in the same subnets as static addresses it is translating. same for inside and dmz interfaces. you dont need the secondary addresses on the router, just add static route entries in the router pointing to the pix outside address.</P></BODY></HTML> Thu, 15 Aug 2002 04:16:02 GMT pgolding 2002-08-15T04:16:02Z https://community.cisco.com/t5/network-security/multiple-subnets-coming-into-pix/m-p/40924#M627290 <P>I have a router that has 3 non-contiguous class C networks being routed to it and a Pix behind it. The Pix must have static translations that have public addresses that fall into each of the subnets. Since I can only have 1 address on the Pix outside interface, and I need to have external statics that fall into all three subnets, can I simply put an IP and 2 secondarys on the router's Ethernet interface and do the statics on the Pix as I would normally, even though the external static addresses aren't in the same subnet as the Pix's external interface?</P> Fri, 21 Feb 2020 06:12:16 GMT https://community.cisco.com/t5/network-security/multiple-subnets-coming-into-pix/m-p/40924#M627290 pries 2020-02-21T06:12:16Z https://community.cisco.com/t5/network-security/multiple-subnets-coming-into-pix/m-p/40925#M627296 <HTML><HEAD></HEAD><BODY><P>yes, the pix does not require its outside interface to be in the same subnets as static addresses it is translating. same for inside and dmz interfaces. you dont need the secondary addresses on the router, just add static route entries in the router pointing to the pix outside address.</P></BODY></HTML> Thu, 15 Aug 2002 04:16:02 GMT https://community.cisco.com/t5/network-security/multiple-subnets-coming-into-pix/m-p/40925#M627296 pgolding 2002-08-15T04:16:02Z