PIX and subnet /31

[James Lasky]

Does anybody know if PIX support /31 subnetting ?

So 255.255.255.254 ?

I saw Version 6.3.3 seems doesn't support it...

Pls let me know.

Tks

[sachinraja]

hello

i dont think it supports.. what exactly is your requirement ??

All the best !!!

[James Lasky]

Since I understood from a previus post that PIX doesn't support loopback interface (with the purpose to open IPsec tunnels), I have to save piblic ip addressing to connect my router to the outside customer PIX.

If I give it a /31 I save 2 ip addresses versus a /30...

[sachinraja]

Hello,

If the PIX outside has a private IP, do a static NAT for the PIX outside IP to a public IP on the internet router (connected to outside PIX).. this can enable you to connect your router to his PIX , through IPSEC....

you cannot have /31's on PIX. i dont think it will work. the above soultion will work and best suited for your scenario..

All the best. .. rate all replies if found useful...

[James Lasky]

thanks!

are you sure IPsec tunnel works using a NAT on the router ?

I'm not able to test it before... so I do not want discover problems later...

Greetings

[sachinraja]

yes.. ipsec tunnel will work , if a nat is done on the router, in case the PIX outside is private, and you want to terminate the IPSEC tunnel on the PIX... i have tested this before and is working live in one of my customers network now...

All the best.. thanks...

[James Lasky]

Thanks to u!

have a nice evening

Ric