IP addressing question on Pix 515E

[admin_2]

Has anyone tried to setup the same IP address range on both the inside and outside interfaces of the PIX? I.E. 192.168.33.0 255.255.255.0 mask (inside) 192.168.19.0 255.255.255.0 mask (DMZ1).

Tried IP NAT at the FW and it does not solve the problem. Internal routers still see this as an IP loop.

[nchandy]

Hi

As long as you do not have the same subnet on 2 interfaces of the pix.. it should not matter.

So a /24 on inside and dmz with a different subnet should work. what do you mean by Internal routers still see this as an IP loop

Thanks

Nisha

[#3]

The internal networks are 192.168.0.0 as well and we are running rip v1 on the inside (some of our older legacy routers (non cisco) cannot handle anything else).

The internal router network sees 192.168.0.0/16 subnet through RIP. Since the inside interface is directly connected to the internal network, when the DMZ interface is brought on line the internal router reports IP loop even though the masking is set to /24 on all of the PIX interfaces.

Since the rip masking is taking precedence I was wondering other than changing the IP addresses if there was another way around it through IP NAT.