PIX & IP's required

[m.lesnick]

what is the minmum number of public ip address required to allow inside - outside internet browsing through a Pix firewall. (not using DHCP from ISP)

(1) for outside interface

&

(1) for PAT address

The way I see it is (2) static public I.P address.

Please verify ..

[beth-martin]

At least two, you are correct. PAT is limited to basic web functions, browsing, ftp, mail, etc but you may have problems with streaming audio/video for example. If you can afford a small pool of addresses and PAT the overload, that’s best.

[cyee]

The more recent versions of PIX IOS require only one IP address. The syntax is:

global [(if_name)] nat_id interface

PAT, then, is processed thru the interface IP address.