Public IP address on router or NAT

[dgoradia]

Hello all,

I need to setup a PIX to allow inbound and outbound access to subnet 10.0.1.x on our network. Basically, they want to have one of our public ip addresses to access this lan. How is the best way to accomplish this?

Can I have map the public ip to the internal router which is 10.0.1.1 or do i have to change the internal router IP to the public one etc etc?

Thank you

 

[VinceWhirlwind]

I guess you could put the PIX in your DMZ with an "outside" address configured to the public address they want to use, and the "inside" on the 10.0.1.0 network.

 

[dgoradia]

This is how I did it:

static (inside,outside) [external_ip] 10.0.1.1 netmask 255.255.255.255 0 0
conduit permit tcp host [external_ip] any

Thank you