pdm location, how many instances should be here ??? 1

[danclark]

Hi all, I have started at a new position and am faced with tidying up a PIX. Can anyone suggest why there would be a need for all these pdm lines in our config...

pdm location 172.31.48.11 255.255.255.255 inside
pdm location 172.31.48.15 255.255.255.255 inside
pdm location 172.31.48.16 255.255.255.255 inside
pdm location 172.31.48.18 255.255.255.255 inside
pdm location 172.31.48.26 255.255.255.255 inside
pdm location 172.31.48.28 255.255.255.255 inside
pdm location 172.31.48.29 255.255.255.255 inside
pdm location 172.31.48.31 255.255.255.255 inside
pdm location 172.31.48.32 255.255.255.255 inside
pdm location 172.31.48.33 255.255.255.255 inside
pdm location 172.31.48.32 255.255.255.252 inside
pdm location 172.31.48.39 255.255.255.255 inside
pdm location 172.31.48.60 255.255.255.255 inside
pdm location 172.31.48.102 255.255.255.255 inside
pdm location 172.31.48.119 255.255.255.255 inside
pdm location 172.31.48.129 255.255.255.255 inside
pdm location 172.31.48.141 255.255.255.255 inside
pdm location 172.31.48.164 255.255.255.255 inside
pdm location 172.31.48.164 255.255.255.254 inside
pdm location 172.31.48.168 255.255.255.255 inside
pdm location 172.31.48.168 255.255.255.254 inside
pdm location 172.31.0.0 255.255.0.0 inside
pdm location 192.168.48.30 255.255.255.255 DMZ_1
pdm location 192.168.64.32 255.255.255.255 DMZ_2
pdm location 192.168.64.34 255.255.255.255 DMZ_2
pdm location 192.168.64.32 255.255.255.252 DMZ_2
pdm location 192.168.64.64 255.255.255.255 DMZ_2
pdm location 192.168.64.65 255.255.255.255 DMZ_2
pdm location 192.168.64.66 255.255.255.255 DMZ_2
pdm location 192.168.64.67 255.255.255.255 DMZ_2
pdm location 192.168.64.66 255.255.255.254 DMZ_2
pdm location 172.19.198.2 255.255.255.254 outside

appolagies for the length of message but I thought I had better include all the lines, is there a need for all of these?

Regards
Dan

 

[yizhar]

HI.

PDM creates thos lines and needs them for any host that has an access-list or other rools related to it (including static commands).

So if other parts of the configuration refers to those addresses you should not delete them.
Anyway these lines should not load the pix too much.
You can also start PDM and try to delete those lines. It will warn you if they are still in use (bound to any rule), and you can do that without "Apply" or without saving the configuration if you're not sure - just to get more info.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[danclark]

Thought it was something like that ) just looked a little untidy.

Thanks heaps
Dan