Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Sample PIX and Router Config Connected to Internet

Dear ciscoer,

Any sample config PIX connected to the Internet with Router. The router using the IP legal and router's ethernet 0 using PIX ethernet0 using and the PIX's ethernet1 Where should I NAT the IP legal from ISP.




PIX Inside (


PIX Outside (



Router Ethernet 0 (


Router Serial 0 (

Thank YOu In Advance


Cisco Employee

Re: Sample PIX and Router Config Connected to Internet

Hi Hato,

You could do NAT 0 on the pix and have the edge router do the NATing for you. This would be the simplest way to get it working.

Other option is to configure PPPoE. Below link is the FAQ for the PIX configuration.



New Member

Re: Sample PIX and Router Config Connected to Internet

In this configuration, how would you use the PIX as an IPSec tunnel terminator for remote access clients using software VPN clients?

New Member

Re: Sample PIX and Router Config Connected to Internet

You don't have to do any IPSEC..

For your particular example.. you will have to NAT in the router and PIX, or router only.. here is the config you need to put there.. (router and PIX)

access-list 1 permit

interface s0

ip nat outside

interface e0

ip nat inside

ip nat inside source list 1 interface s0 overload

In that previous configuration you are NATing the ethernet network behind the router only.. In order for (network behind PIX) to be able to access the internet, you will have to NAT this too..

nat 1

global 1 interface

What's happening now is that, you are doing a first stage NATing in PIX by natting all to the PIX outside IP address (, then the second stage NATing is done in the router by NATing all to the s0 interface IP address (

This should do it. Let me know how it goes.

CreatePlease login to create content