Multiple subnets on outside interface

[monkeyboy]

Hello, what would be the best way of having 2 different public subnets on the outside interface of a pix 515.

We are terminating vpns on the firewall - so don't want to use security contexts..

[haydenmace]

Not sure what the uses are for the 2 subnets, but you could have one as the physical addressing of the pix, and the other subnet used for nat purposes, so upstream devices would just route that subnet towards the outside interface which is on the first subnet.

Alternatively if you had 2 upstream gateways you can utilise, then you can create a trunked interface and have both subnets fully useable on an interface.