Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

pix515 multiple interface configuration

Hi, actually i have this scenario:pix 515e version 6.2(2) with on board

6 interfaces but now configure with 3 interfaces (in this mode):

INTERNET ROUTER (ETH 172.17.10.1)

I

I

I

I(OUTSIDE - 172.17.10.2)

PIX -INTF2--.2--------------(172.17.12.0/29)--------.3(PARTNER)

INSIDE (172.17.8.1/23)

I

I

I

I

MY LAN

then 3 interfaces configuration without NAT.

there are the static routes:

route outside 0.0.0.0 0.0.0.0 172.17.10.1 1 route intf2 192.168.54.209 255.255.255.255 172.17.12.3 1 route intf2 192.168.129.0 255.255.255.0 172.17.12.3 1 route intf2 192.168.131.0 255.255.255.0 172.17.12.3 1 route intf2 192.168.134.0 255.255.255.0 172.17.12.3 1

traffic outcomes from my default gateway coming out from 172.17.10.1, traffic out/in from /to network 192.168.x.x/16 is forwarded from intf2 this scenario works well.

but tomorrow i must add new two routers on 2 new interfaces and i would have this new scenario:

ISP ROUTER (.3 ) ISP ROUTER (.1)

\ I

172.17.14.0/30 \ I 172.17.10.0/30

\ I

INTF3(.2) \ I(OUTSIDE - .2)

(PARTNER)(.3)(172.17.13.0/29)INTF5(.2)PIX-INTF2(.2)(172.17.12.0/29)(.3)(PARTNER)

INSIDE (172.17.8.1/23)

I

I

I

I

I

MY LAN

and this would have to be future situation:

the traffic that outcomes from 172.17.8.1/25 coming out from

172.17.10.1

the traffic that outcomes from 172.17.8.128/25 coming out from a new interface 172.17.14.3 except traffic out/in from 192.168.0.0/16 coming out from 172.17.12.3 traffic that outcomes from 172.17.9.1/25 coming out from interface

172.17.14.3 except traffic out/in 192.168.0.0/16 coming out from

172.17.13.3

traffic outcomes from 172.17.9.128/25 coming out from 172.17.10.1

is it possible this scenario?

can you help me with this configuration?obbligatory i use NAT?

sorry for my bad english...

thanks in advance

Matt

1 REPLY
132
Views
0
Helpful
1
Replies