Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Does the Pix support secondary IP addresses

I have aPix FW running version 6.3(3), can the Pix FW support additional/secondary IP addresses on its interfaces much like a router can ?

Thanks inadvance

Stu

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Does the Pix support secondary IP addresses

Only one IP address can be configured on a given interface.

What is the design goal you are trying to achieve? If it is simply to provide a gateway to more than one subnet, why not put them on separate VLAN's?

http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/bafwcfg.html#wp1112226

4 REPLIES
Cisco Employee

Re: Does the Pix support secondary IP addresses

Only one IP address can be configured on a given interface.

What is the design goal you are trying to achieve? If it is simply to provide a gateway to more than one subnet, why not put them on separate VLAN's?

http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/bafwcfg.html#wp1112226

Silver

Re: Does the Pix support secondary IP addresses

believe it or not, there are places that still

use hub instead of switch. They want to

separate layer-3 while having multiple network

with different networks connected to the same

hub. That's what router's secondary address is

designed for, among other things.

Cisco Employee

Re: Does the Pix support secondary IP addresses

I understand completely. Unfortunately, the ASA/PIX platform is focused on security, and as such does not have all the flexibility of the IOS router platform. The only other option I can suggest is to front-end the ASA/PIX with a router.

New Member

Re: Does the Pix support secondary IP addresses

Thanks for the reply, i was thinking that it didnt support it, and yes to your question they want to extend the connected subnets, so VLANs might well be the way to go, thanks for the reply

109
Views
0
Helpful
4
Replies