secondary IP address on the external interface of PIX???

[ivan.marakovic]

Hi All,

Is it possible to have static translations to two diferent ip address ranges on the external interface of PIX?

We want to configure pix for BGP multihoming scanario, We have two internet connections and one pix on each. Both PIXs need to accept incoming traffic coming to two different /24 ranges. So, some internal servers will be translated to one /24 range and others will be translated to a different /24 on both pixes.

Can we have a secondary IP address on the external pix interface?

Both PIXs have only one external interface and a perimeter router in front of them.

6.1.4 IOS is in use.

Thanks a lot.

Regards

Ivan

[mostiguy]

A pix can static for multiple, non contiguous ip spaces, but cannot have more than one ip address assigned to an interface.

If a connection was initiated to pix A, and something happens so that the route goes down, and traffic then goes to pix B, that pix is not going to allow existing connections to go through it as it is not aware of their prexisting state

[ivan.marakovic]

Thanks.

I will work on static for multiple ip spaces then.

Exsisting connections will be lost but new ones will be ok.

How can we achieve no interuption with BGP multihoming with pixes in case of a route going down?

Regards

Ivan