Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Chaning T1 Service in PIX 525

We are changing our T1 server to an other company; I know I need to change the IP address to the new provider on the outside, do I need to change the translation table and all ACL?s assoc with the old IP address. It would greatly appreciate if someone can put together some steps to follow or point me to a good document. Thanks

4 REPLIES
Gold

Re: Chaning T1 Service in PIX 525

You need to change anything that references the old IP addresses, including but not limited to: NAT entries, ACL's, access management, DNS entries, VPN clients/peers, and anything else that might rely on the old addresses.

Re: Chaning T1 Service in PIX 525

Hi,

The previous poester spelled it out for you accurately, you need to make a thorought assesment of your current outside public IP block and create a change cutover plan that not only covers what Srue indicated but also default routes and one-to-one nat statements.

Start with ducumenting current static NATs related to public IP and internal mappings, global nat pools for outside interface etc.., from past experiences I have found that you mostly need to change logical IP addresses for one-to-one nats

and global pools, pay attention to your current local DNS services and current ISP and the new ISP.

If you have any other concerns or need assistance please drop us a line.

HTH

Jorge

New Member

Re: Chaning T1 Service in PIX 525

Hi

After I follow all steps to change address, do I do the xlate on the FW and how long will this take to re-populate?

Re: Chaning T1 Service in PIX 525

Jerrie,

once you chnange static nat mappings you need to clear xlate , the clearing of xlate is immediate, once the new nat is configured with new IP info the change is also immediate.

e.g

say you chnage a static translations from old public IP to new public IP for a local host.

Old public IP: 10..10.10.1

new public IP: 20.20.20.1

local host IP: 30.30.30.1

no static (inside,outside) 10.10.10.1 30.30.30.1

clear xlate interface outside global 10.10.10.1 netmask 255.255.255.255

static (inside,outside) 20.20.20.1 30.30.30.1 netmask 255.255.255.255

105
Views
5
Helpful
4
Replies