Two Pix501/Cisco1721 layouts

[TimV]

This is a follow-up to the last topic of comparing the Pix501 to a 1721 router.

My network consultants want to put the 1721 first, then 2 pix501's, then my 2 subnets.

I would like to do one single Pix 501, then then 1721 router feeding the 2 subnets.

They say I will need 2, probably 3 public IP addresses to make their plan work.

Can I use my plan and use a single Public IP address? Can I open ports to either subnet with the router first in line?
Are there advantages to either??

Thanks!!!

Tim


MY PLAN: Internet (1 public IP address)
|
|
Pix-501 (several ports open to computers
| on subnet 1. I want some on
| subnet 2 also)
|
Cisco 1721 Router
/ / / 192.168.1.x 180.180.180.x
| |
| |
| |
| |
Subnet 1 Subnet 2







THEIR PLAN: Internet (1 public IP address)
|
|
Cisco 1721 Router
/ / / \
Pix-501(1) Pix-501(2)
192.168.1.x 180.180.180.x
| |
| |
| |
| |
Subnet 1 Subnet 2

 

[themut]

It all depends on your connection to the Internet. You're plan would work for DSL modem or cable modem Internet access, but it would not work for a serial connection to the Internet.

Another option, although more expensive, would be:

Option: Internet (2public IP address)
|
|
Cisco 1721 Router
|
|
Pix-501
|
|
|
Cisco 1721 Router
/ / / 192.168.1.x 180.180.180.x
| |
| |
| |
| |
Subnet 1 Subnet 2