Quick Question, multiple IP addresses on PIX 506

asmith252 · ‎10-01-2008

Have a really simple question I know it is possible to put multiple IPs' on the outside interface of the PIX, will the standard

ip address outside XXX.XXX.XXX.XXX XXX.XXX.XXX

command work? And if I use that will it erase the ip address I already have assigned to it? I need it for an internal webserver.

Jon Marshall · ‎10-01-2008

Ashley

Yes it would overwrite it. If you want to represent the internal webserver on a different public IP than the outside interface IP you just use a static statement ie.

static (inside,outside) netmask 255.255.255.255

You don't have to assign this public IP to an actual interface.

Jon

asmith252 · ‎10-01-2008

Ok, I setup the static statement, but I don't think it worked because I tried to ping that public IP and I got nothing. Do I need to add an access-list to allowing traffic to it?

Jon Marshall · ‎10-01-2008

Sorry, yes you do. Once you have the static setup then you need to allow whatever ports you want to that public IP. This access-list needs applying to the outside interface.

Jon