pix 501 multiple outside ip addresses ??

[tuckerssb]

Can I assign multiple ip addresses (different networks) to the PIX 501??

My customer is changing T-1's. I have pre-configured a 26xx as the front end router for the new T-1.

I may have to do this switch remotely with a non-tech swicthing cables.

If I can prepare by assigning a second outside ip address from the new t1 range, then we can do evrything remotely.

1. add new address to pix outside

2.move outside cable from old router to new router.

3. complete pix config (static stuff) via ssh over new T1.

Tom

[Patrick Iseli]

NO, on the PIX Firewall is no way to add a second IP address as you can do it on a Router.

1.) Preparation from remote location:

- Add secondary IP address on the router interface leading to the PIX.

Connect to the PIX:

- ssh config and temporary telnet access from outside router.

Connect to your router and telnet into the PIX !!!

- change IP

- change default route

- access-list

- statics

- nat/globals

- clear xlate

- clear arp

2.) Go to do all changes on the router, you can do this also before the changes on the PIX.

sincerely

Patrick