PIX global (outside) configuration

[ramiro]

I can assign a global (outside) IP address of a network different to the IP address assigned to the outside interface?. That is, something like this:

ip address outside 200.30.24.3 255.255.255.0

global (outside) 1 200.12.27.50

Thanks.

R.@.M.

[mostiguy]

Yup.

global (outside) 1 200.12.27.50 netmask x.x.x.x

x.x.x.x being the appropriate subnet mask for that subnet

should work to specify one ip

[scoclayton]

One important caveat here is that we did change the arp module in 6.3(1) so that the PIX would not proxy-arp for an address from an address that was not on the same subnet as the address it was arp'ing (does that make sense?). Anyway, it broke setups such as this so after realizing it was probably a bad idea, we changed it back. If you plan to do this and run 6.3 code, please make sure you use 6.3(3) and not 6.3(1). But should work fine.

Scott