Multiple external subnets

[wfitzgerald]

Hi Guys,

I have an existing pair of PIX 515E that has two interfaces. One connected to the public internet via my ISP and one internal.

I recently ran out of IP's and had the ISP route an additional block to public IP of my firewall. This isn't working for some reason and I'm trying to figure out why.

The "ip address outside XXX" command defines the outside address and I don't see any way to add a secondary subnet.

I tried just adding a rule to the firewall for one of the IP's in the new subnet, but I can't seem to get traffic to pass though the device.

Does anyone have any ideas here?

Thanks
Warrick

[varrao]

Hi Warrick,

If the new block of IP's that you have procured is totally of a diff subnet than the existing one, then you cannot add those subnet into the existing one. You would need to add another interface on the firewall, maybe outside2, and then assgn a IP on that interface, and it should have a default route for your ISP router. For any new server you host on the inside network, then you can assign a public ip from this new range. It shoudl work after that. Moreover could you tell me the code that you are running.

Hope this helps.

Thanks,

Varun