Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Global private addresses

Status
Not open for further replies.

adamson67

Technical User
Dec 7, 2001
10
US
Can I use the following global statements with private ip addresses even though I have one static public address from the isp?

global (outside) 1 10.10.2.1-10.10.2.253 netmask 255.255.255.0
global (outside) 1 10.10.2.254 netmask 255.255.255.255
 
HI.

* pix normaly needs registered IP addresses at the outside interface for proper operation and future options like VPN.
(It can work behind another NAT but you'll have problems with VPN ,multimedia or other apps).

* As far as I remember, if you use NAT & PAT together, the PAT address should be the lowest, i.e.:
global (outside) 1 10.10.2.2-10.10.2.254
global (outside) 1 10.10.2.1

* The netmask of the global IP addresses should be the same as the netmask for the outside interface and you can ommit it (will be added by the pix) in the GLOBAL configuration command.

Bye
Yizhar Hurwitz
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top