How To configure PIX behind router doing NAT?

jwalzer · ‎02-25-2003

I am installing a Cisco PIX behind a Netopia router (yuck) running NAT. The inside network IP address scheme is 192.168.1.x. How do I configure the two intefaces on the PIX? Can they be in the same IP address scheme of 192.168.1.x, or does one have to be a different network (10.x.x.x)?

Thanks,

Jeff

steve.barlow · ‎02-25-2003

They can be on the same major net (eg 192.168.1.x), as long as they are on different subnets.

For example:

ip address outside 192.168.1.1 255.255.255.240

ip address inside 192.168.1.65 255.255.255.192

Note: if that router is randomizing sequence numbers (which I doubt) and you are using statics, you may have to use the 'norandomseq' keyword or your data may get scrambled.

Hope it helps.

Steve