PIX sub-interface address feature

[murali.sethuraman]

Hello All,

I need your valuable suggestion and comments whether the following solution will work based on the PIX 6.3 OS code.

1. Two Internet links connected to the same service provider on a single cisco router.

2. PIX Outside interface and Internet router LAN ports with dual IP addresses representing one of the range of IP addresses of each link.

3. Inside users accessing the Internet NATed at PIX through one of the valid IP address range.

4. Outside users accessing the web/email services through the registered IP address range of which the router and PIx will also be a part.

I want to know whether such a solution will work and are there any pitfalls? Appreciate your reply. Thanks & regards,

Murali

[tbissett]

If your web/email servers are going to be in the DMZ, then this may be tough to do. This is because you can have only one default route in the PIX, so everything will end up going out the same circuit.

Anyone have any ideas?