Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Need helpt with pix501

Status
Not open for further replies.

turalo

IS-IT--Management
Feb 20, 2007
41
NL
Ok, need help again, this time I need the router to use not one but many outside IP's, so I have a range of IP's given to me by InternetProvider, that are dedicated IP's lets say:

IP : 212.23.xx.123 to 212.23.xx.132
mask: 255.255.255.248


This router has as you know 4 lan ports, 1 wan port,
I need to connect 4 computers to the internet via this router, and each of this computer must have old IP settings, so for example
my PC1 has IP : 212.23.xx.123
my PC2 has IP : 212.23.xx.124

Now I want them to be behind Pixfirewall but I want them
to keep the IP's, so not to change it to local IP's, but keep same IP's and secure them using Pix, so Please can sombody tell me how to set this in PixFirewall?
Right now I can configure pix using one outside IP and many inside IP's but local ip's like ; 192.168.1.1
I need to know how to do same but keep original IP's.
thanks.
 
What you need is to apply statics for all four of the PCs.

static (inside,outside) 212.23.xx.123 192.168.1.X netmask 255.255.255.255
static (inside,outside) 212.23.xx.124 192.168.1.X netmask 255.255.255.255
static (inside,outside) 212.23.xx.125 192.168.1.X netmask 255.255.255.255
static (inside,outside) 212.23.xx.126 192.168.1.X netmask 255.255.255.255

This will provide a one to one mapping of the IPs and still provide protection to the boxes. Anythying you want to allow you will need to do through the outside ACL as before.


Brent
Systems Engineer / Consultant
CCNP, CCSP
 
OK, let me try, I will let you know about result, very thankfull for your help.
 
Actualy I want them to have same IP inside too, so if

PC1 normaly had dedicated connection and used IP : 212.23.xx.123 with net mask : 255.255.255.248

and now I want it to keep same settings but work behind firewall. is that possible?

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top