PIX allowing RFC 1918

[goa0201]

Hi

Need to know whats the best way to allow Private address space .

PIX ---Router -----Internet

will default route outside work.

Or is there best way to do it.

[nkhawaja]

Hi,

What do you mean to allow Private Address Space?

Private Address space will never make it to the internet. You need to have NAT configured. Either on PIX or on Router.

Thanks

Nadeem

[goa0201]

Hi,

Thanks for your response, We have a cust we support only their router, we block Private address space on the router. The cust is using PIX firewall ,

explained to him that he need to NAT , his internal network is private address. so not to sure what the configs on the Pix are.As far as the rotuer is concerned we are not specifiaclly blocking any ports or any Ip address.

[rgrcommo]

To follow up..

Yes, he/she needs to configure their PIX correctly. You blocking RFC 2827 will have nothing to do with their PIX config unless you have it configured wrong.