Public IP addressing

[jdl508]

I have a quick question i am setting up a 2 dmz network with internet connection 2600 cisco router
I also have 2 pix firewalls 1 internal and 1 external (behind router)
what ip addresses do i need public here is what i have to date

1 = Email / smtp relay
1 = Web Server
1 = External Router int
1 = External PIX1 int
1 = For internet access /client on corp network

is this all i need or do i need another for nat? or anything else
thank you
jon

 

[ChrisAC]

You will need a global IP address for your internet connected router and the outside interface on your PIX. You can then configure the rest of your network with private IP addresses and do NAT on the firewall. You might want to create a NAT pool on your PIX or just use one IP address with PAT (the preferred option).

You will also need to assign global IP's for anything that needs to be accessed from the web. For example, web and mail servers. The actual boxes would be configured with private IP's and the firewall would do static NAT translations for them.

Chris.
************************
Chris Andrew, CCNA
chrisac@gmx.co.uk
************************