501 setup questions

[johnnymc]

Hi all,

I almost ready to set up my 501 but I have just a few more questions. Currently my network connects to a router and then out to a cable modem and I have access lists on the router but I need to install the PIX basically just for the VPN support. Here is how I plan to set it up:

Internet
|
|
Cable Modem
|
|
1.2.3.4 (IP assigned to me from my ISP)
PIX 501
?.?.?.?
|
|
?.?.?.? (interface E1)
Cisco Router
172.16.x.x (default gateway for my network PC's)(Int E0)
|
|
Users and computers


My first question is, does it matter what address's I use for the questions marks? Can I just use 10.10.10.1 and .2 for those interfaces?
My second question is, on my router I just need to change the default route to the new IP I give interface E1 right?
My last question is, the pix says it's default config is all I really need. What is your opinion of that?

Thanks all!!!

 

[baddos]

It doesn't matter if you do NAT on the PIX.

The default configuration for the PIX is to let everything go out from the PIX, but no inbound. Meaning that someone can't connect to your network from the Internet, but you can connect to anything on the Internet.

Why have the router behind the PIX? It would be a lot easier to remove the router (providing you don't have any internal subnets).