Solved: Does the Pix support secondary IP addresses

stuart.jones · ‎03-16-2008

I have aPix FW running version 6.3(3), can the Pix FW support additional/secondary IP addresses on its interfaces much like a router can ?

Thanks inadvance

Stu

jefanell · ‎03-16-2008

Only one IP address can be configured on a given interface.

What is the design goal you are trying to achieve? If it is simply to provide a gateway to more than one subnet, why not put them on separate VLAN's?

http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/bafwcfg.html#wp1112226

View solution in original post

jefanell · ‎03-16-2008

Only one IP address can be configured on a given interface.

What is the design goal you are trying to achieve? If it is simply to provide a gateway to more than one subnet, why not put them on separate VLAN's?

http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/bafwcfg.html#wp1112226

cisco24x7 · ‎03-16-2008

believe it or not, there are places that still

use hub instead of switch. They want to

separate layer-3 while having multiple network

with different networks connected to the same

hub. That's what router's secondary address is

designed for, among other things.

jefanell · ‎03-16-2008

I understand completely. Unfortunately, the ASA/PIX platform is focused on security, and as such does not have all the flexibility of the IOS router platform. The only other option I can suggest is to front-end the ASA/PIX with a router.

stuart.jones · ‎03-17-2008

Thanks for the reply, i was thinking that it didnt support it, and yes to your question they want to extend the connected subnets, so VLANs might well be the way to go, thanks for the reply