My ISP has given me two different ip ranges, a /30 and a /29. The /30 is to connect to them, and the /29 are all mine to use.
Normally, I'd set up a router to translate between the /30 and the /29. give the router the first address, the fw the second address in the /29 range. However, the router used to translate between ethernet and t1, now it's ethernet on both sides of the router and it seems a waste to put in a router between the firewall and the isp network.
Can I simply give the pix the /30 on the outside and still do all the normal stuff, nat, vpn, etc with the /29 (outside)?