PIX outside interface multiple IP addresses

[sunilyk]

Hi,

Is it possible to assign 2 or 3 IP addresses to PIX outside interface? (Just like secondery IP address in case of router FE port.) Is this feature available in new (7.0) os ?

Regards,

Sunil

[sachinraja]

Sunil

No . It is not possible. You can create VLANs if required to split up the subnets on the outside interface, but cannot use secondary IPs.

Hope this helps.. all the best.

Raj

[sunilyk]

Thanks Raj.

Is it advisable to use same PIX firewall for 2 different ISP's? (By configuring other available FE for 2nd ISP while outside interface for 1st ISP)

Regards,

Sunil

[sachinraja]

Sunil,

If the ISP links terminate on two different routers, you cannot have one firewall managing the show. YOu need to have a firewall for each router/ISP, since firewalls can have only one default route, unlike routers.

If both the ISP links terminate on the same router , you can manage connections through them using the same firewall. create nat/.static statements based on the IP addresses of each of these ISPs.

hope this helps. rate replies if found useful...

Raj