Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

pix outside IP address

what will be my PIX outside Ip address when it is connected directly to the Router. suppose the routers e0=192.168.10.10 & dialer is ip address negotiated (since it is dialing out to the internet).

LAN-----PIX?--------Router---------Internet

6 REPLIES
New Member

Re: pix outside IP address

Depends what you want to assign it. It will be in the 192.168.10.0 network however. So maybe 192.168.10.1?

New Member

Re: pix outside IP address

So is it correct if i use for Router

E0=192.168.10.10

Dialer1 = ip address negotiated

and for PIX

E0= 192.168.10.8

E1= 192.168.10.7

Re: pix outside IP address

The inside and the outside ip address of the pix should be on a different network.

If your inside network is 192.168.10.0 mask 255.255.255.0 then it is not possible to use also an ip address in the 192.168.10.0 network for the outside interface.

Maybe you could use a different network for your LAN, for example 192.168.11.0 netmask 255.255.255.0

Please remember to add a default route on the pix that points to the router:

'route outside 0.0.0.0 0.0.0.0 192.168.10.10'

Kind Regards,

Tom

New Member

Re: pix outside IP address

so my pix config will be like

E0 = 192.168.11.1

E1 = 192.168.10.8

And my router 801

E0 = 192.168.10.10

It means that my router is on another network & PIX on another network. It is possible or i have to bring my router & pix in 192.168.11.0 network

New Member

Re: pix outside IP address

this will be the scenario

LAN(192.168.11.x)----->(PIX E0 or INSIDE<192.168.11.1> --PIX E1 or OUTSIDE<192.168.10.8>)----------->Router(192.168.10.10)-----------------> Internet

Hope this is clear ?

ramesh

Re: pix outside IP address

Hi,

I hope everything is clear now? If not, please ask :-)

I just want to add this to the conversation:

by default the eth0 is the outside interface of the pix en eth1 is the internal interface.

It is possible to switch eth0 and eth1 so that eth0 becomes the inside interface eth1 the outside interface. Just make sure that the outside interface has the lowest security level (=0) and the inside interface has the highest security level set (=100).

Kind Regards,

Tom

202
Views
0
Helpful
6
Replies
CreatePlease to create content