Quick Question, multiple IP addresses on PIX 506

Unanswered Question
Oct 1st, 2008

Have a really simple question I know it is possible to put multiple IPs' on the outside interface of the PIX, will the standard

ip address outside XXX.XXX.XXX.XXX XXX.XXX.XXX

command work? And if I use that will it erase the ip address I already have assigned to it? I need it for an internal webserver.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jon Marshall Wed, 10/01/2008 - 10:56

Ashley

Yes it would overwrite it. If you want to represent the internal webserver on a different public IP than the outside interface IP you just use a static statement ie.

static (inside,outside) netmask 255.255.255.255

You don't have to assign this public IP to an actual interface.

Jon

asmith252 Wed, 10/01/2008 - 11:45

Ok, I setup the static statement, but I don't think it worked because I tried to ping that public IP and I got nothing. Do I need to add an access-list to allowing traffic to it?

Jon Marshall Wed, 10/01/2008 - 11:48

Sorry, yes you do. Once you have the static setup then you need to allow whatever ports you want to that public IP. This access-list needs applying to the outside interface.

Jon

Actions

This Discussion