03-16-2008 05:28 PM - edited 03-11-2019 05:18 AM
I have aPix FW running version 6.3(3), can the Pix FW support additional/secondary IP addresses on its interfaces much like a router can ?
Thanks inadvance
Stu
Solved! Go to Solution.
03-16-2008 07:14 PM
Only one IP address can be configured on a given interface.
What is the design goal you are trying to achieve? If it is simply to provide a gateway to more than one subnet, why not put them on separate VLAN's?
http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/bafwcfg.html#wp1112226
03-16-2008 07:14 PM
Only one IP address can be configured on a given interface.
What is the design goal you are trying to achieve? If it is simply to provide a gateway to more than one subnet, why not put them on separate VLAN's?
http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/bafwcfg.html#wp1112226
03-16-2008 07:47 PM
believe it or not, there are places that still
use hub instead of switch. They want to
separate layer-3 while having multiple network
with different networks connected to the same
hub. That's what router's secondary address is
designed for, among other things.
03-16-2008 07:52 PM
I understand completely. Unfortunately, the ASA/PIX platform is focused on security, and as such does not have all the flexibility of the IOS router platform. The only other option I can suggest is to front-end the ASA/PIX with a router.
03-17-2008 01:47 PM
Thanks for the reply, i was thinking that it didnt support it, and yes to your question they want to extend the connected subnets, so VLANs might well be the way to go, thanks for the reply
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide