Connecting PIX Inside Interface

[mnlatif]

Hi,

We have a FLAT Inside network with all users and Servers in the same Subnet.

While connecting PIX Inside interface

1. Should i connect it to a different subnet and then route using a Router, to Block un-necassary broadcast being sent to PIX Interface ?

2. Or i can connect it directly to the Inside network (i.e IP address in the same subnet). As long as i have Access-List on the inside interface blocking un-necassary traffic, in that case the PIX CPU cycle won't be over loaded ?

Thanx \\ Naman

[kdurrett]

Naman,

I would go with choice 2, no need for the additional purchase. Typically your pix will have a higher processer and more memory than your router would and therefore would have less impact. There shouldnt be any significant impact on the pix from your lan. Pix will drop broadcast, so it doesnt really see them so there should be no impact on your cpu.

Kurtis Durrett