Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Can PIX use all IPs in an /29 PPPoE sticky subnet from SBC?

Can PIX use all IPs in an /29 PPPoE sticky subnet from SBC?

Like one IP on the WAN as GW and rest five inside the LAN and be protected?

  • VPN
1 ACCEPTED SOLUTION

Accepted Solutions
Gold

Re: Can PIX use all IPs in an /29 PPPoE sticky subnet from SBC?

it's good to learn that your issue has been resolved.

according to cisco:

Why should I rate posts?

If you see a post that you think deserves recognition, please take a moment to rate it.

You'll be helping yourself and others to quickly identify useful content -- as determined by members. And you'll be ensuring that people who generously share their expertise are properly acknowledged. As posts are rated, the value of those ratings are accumulated as "points" and summarized on the Member Profile page and on each member's Preferences page.

3 REPLIES
Gold

Re: Can PIX use all IPs in an /29 PPPoE sticky subnet from SBC?

let say the public range is 192.168.1.0/29. i.e. hos range is 192.168.1.1 to 192.168.1.6.

e.g.

172.16.8.0/24 <--pix inside--172.168.8.1--> pix <--pix outside--192.168.1.1--> www

pix can then be configured to perform static nat. i.e. to translate a host from 172.16.8.0 to 192.168.1.0.

e.g.

a webserver has been deployed in the pix inside net with ip 172.16.8.100. since this is a private ip, user from the internet will not be able to access it. this is where static nat comes in the picture.

static (inside,outside) 192.168.1.2 172.16.8.100 netmask 255.255.255.255

access-list inbound permit tcp any host 192.168.1.2 eq 80

access-group inbound in interface outside

now the user from the internet will be able to access the webserver by pointing to 192.168.1.2.

New Member

Re: Can PIX use all IPs in an /29 PPPoE sticky subnet from SBC?

Thanks a lot.

Gold

Re: Can PIX use all IPs in an /29 PPPoE sticky subnet from SBC?

it's good to learn that your issue has been resolved.

according to cisco:

Why should I rate posts?

If you see a post that you think deserves recognition, please take a moment to rate it.

You'll be helping yourself and others to quickly identify useful content -- as determined by members. And you'll be ensuring that people who generously share their expertise are properly acknowledged. As posts are rated, the value of those ratings are accumulated as "points" and summarized on the Member Profile page and on each member's Preferences page.

195
Views
0
Helpful
3
Replies
This widget could not be displayed.