Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

PIX sub-interface address feature

Hello All,

I need your valuable suggestion and comments whether the following solution will work based on the PIX 6.3 OS code.

1. Two Internet links connected to the same service provider on a single cisco router.

2. PIX Outside interface and Internet router LAN ports with dual IP addresses representing one of the range of IP addresses of each link.

3. Inside users accessing the Internet NATed at PIX through one of the valid IP address range.

4. Outside users accessing the web/email services through the registered IP address range of which the router and PIx will also be a part.

I want to know whether such a solution will work and are there any pitfalls? Appreciate your reply. Thanks & regards,


New Member

Re: PIX sub-interface address feature

If your web/email servers are going to be in the DMZ, then this may be tough to do. This is because you can have only one default route in the PIX, so everything will end up going out the same circuit.

Anyone have any ideas?