Before we implemented our Pix our border router was performing NAT for us.
When we implemented the Pix, rather than messing with our boarder router we just set it up to NAT again. We did this because of time constraints. The Pix was configured completely off line then put in place. It took most of that night to fix everything we missed and we ran out of time to reconfigure the other router before our morning rush.
So, boarder router NATs to one private address, then the Pix in turn NATs that to another private address.
Aside from the extra overhead, can anyone think of any issues that could pop up doing it this way?
We've been running it this way for nearly a year now and haven't seen any real problems, THAT I AM AWARE OF. Of course problems could be happening that no one has reported to me.
We are planning a building move and now would be the time to reconfigure this if needed.