topic Re: PIX redundancy in Network Security https://community.cisco.com/t5/network-security/pix-redundancy/m-p/67673#M678412 <HTML><HEAD></HEAD><BODY><P>If I understand correct, and assuming that interface 1+2 will be used for the outside and 3+4 for the outside. Also assuming 1+2 will be in the same subnet (e.g. 213.1.1.0) and 3+4 would be in the same subnet (e.g. 172.16.0.0), I believe that this will be impossible as the PIX IOS most likely will not allow you to assign the same subnet to two interfaces. Also because each interface has to have a security-level (e.g. outside =0 / inside=100), the PIX would become confused.</P><P></P><P>But if go ahead a setup a test-lab and make it work I would be much obliged if you could drop me a line or two...</P><P></P><P>Best regards</P><P>Goran</P></BODY></HTML> Thu, 09 May 2002 19:20:13 GMT gradosavljevic 2002-05-09T19:20:13Z PIX redundancy https://community.cisco.com/t5/network-security/pix-redundancy/m-p/67672#M678379 <P>If I have 4 interfaces on my PIX535 is it possible to use two interfaces as inside and two as outside, ex. "inside", "inside2", "outside", "outside2" and then let the inside interfaces use nat for the same address space and let the the outside interfaces share the same global address pool?</P><P></P><P>I want to connect the PIX to two switches on both the internal and the external network for redundancy.</P><P>Is that kind of configuration possible?</P> Fri, 21 Feb 2020 06:03:12 GMT https://community.cisco.com/t5/network-security/pix-redundancy/m-p/67672#M678379 dasplund 2020-02-21T06:03:12Z Re: PIX redundancy https://community.cisco.com/t5/network-security/pix-redundancy/m-p/67673#M678412 <HTML><HEAD></HEAD><BODY><P>If I understand correct, and assuming that interface 1+2 will be used for the outside and 3+4 for the outside. Also assuming 1+2 will be in the same subnet (e.g. 213.1.1.0) and 3+4 would be in the same subnet (e.g. 172.16.0.0), I believe that this will be impossible as the PIX IOS most likely will not allow you to assign the same subnet to two interfaces. Also because each interface has to have a security-level (e.g. outside =0 / inside=100), the PIX would become confused.</P><P></P><P>But if go ahead a setup a test-lab and make it work I would be much obliged if you could drop me a line or two...</P><P></P><P>Best regards</P><P>Goran</P></BODY></HTML> Thu, 09 May 2002 19:20:13 GMT https://community.cisco.com/t5/network-security/pix-redundancy/m-p/67673#M678412 gradosavljevic 2002-05-09T19:20:13Z