PIX/ASA as outside router?

Unanswered Question
Dec 4th, 2007

My ISP has given me two different ip ranges, a /30 and a /29. The /30 is to connect to them, and the /29 are all mine to use.

Normally, I'd set up a router to translate between the /30 and the /29. give the router the first address, the fw the second address in the /29 range. However, the router used to translate between ethernet and t1, now it's ethernet on both sides of the router and it seems a waste to put in a router between the firewall and the isp network.

Can I simply give the pix the /30 on the outside and still do all the normal stuff, nat, vpn, etc with the /29 (outside)?



I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Collin Clark Tue, 12/04/2007 - 14:36


Yup! The ISP is routing that address space down to you and the PIX/ASA will proxy that address space (ie resolve statics).



This Discussion