Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Secondary IP Address on PIX interface

Can you please advise if it is possible to configure secondary IP addresses on a PIX Ethernet interfaces or any ways around achieving this?

5 REPLIES

Re: Secondary IP Address on PIX interface

Hi,

No, there is no option to configure secondary address on a PIX. Sorry. As for "ways around", what exactly are you doing that requires multiple addresses on an interface?

Scott

New Member

Re: Secondary IP Address on PIX interface

Thanks for response. In process of migrating from an old IP addressing scheme to a new private scheme on a DMZ interface hanging off the PIX. In order to allow the migration of the various hosts over time I was hoping to provision secondary addressing allowing both addressing schemes in place at the same time for a short period.

Re: Secondary IP Address on PIX interface

Ahh, I see. Short of adding a new interface on the PIX for the new network, I don't see a work-around for this type of setup. If this is a feature you need, you may want to lobby your account team to file a PERS request. I wouldn't hold my breath if I were you but it is an option I suppose. I know that the PIX team has been resistent to this idea in the past. I do know that some versions of Windows will allow you to set a default gateway that is *not* in the same subnet as the host. I have no idea how this works as it seems to go against every TCP/IP rule I know, but it does. Good luck.

Scott

New Member

Re: Secondary IP Address on PIX interface

I've had this same situation, where multiple legacy IP subnets had to be supported once a PIX was installed. The only workaround I could find was to wedge in a layer 3 switch (a Catalyst 3550, for example) between the PIX and the multiple subnets. That way, the L3 switch could route traffic between the small PIX subnet and another interface with secondary addresses defined.

DaveH

New Member

Re: Secondary IP Address on PIX interface

PIX OS 6.3 now supports VLANs, therefore you could configure an 802.1q trunk from the PIX to an L3 switch or router.

EG - pix command is:-

interface ethernet0 vlan2 logical

165
Views
0
Helpful
5
Replies
CreatePlease to create content