Cisco PIX 506E (6.3) help.

[admin_2]

I have to hosted servers, one has 25 IP's the other 3. Why this was done is beyond me; however, I digress. We are taking over the firewall management and I need to set up the 506E to handle this.

Does the 506e allow 29 IP's on the outside port or can I allow the servers to keep their IP's (this would be much better)?

[mostiguy]

A pix cannot act as a bridging firewall, so you will likely need to to put those ips on the outside int

[thiland]

I'm assuming all IP addresses are in their own unique subnet since you're wanting to assign 28 secondary IP's to the PIX outside interface.

1. The PIX does not support secondary IP addresses

2. One option may be to run a layer-3 switch behind the PIX, and attach the server(s) to a VLAN trunk port. Make sure an VLAN-aware NIC is installed in the server (i.e. Intel server adapter).

Then configure the default route of the L3 switch to point to the PIX.