Using a single IP on the outside 1

[yizhar]

HI!

If some SOHO has a single registered IP for connection to the Internet, and a PIX firewall, how should a PIX be configured?
Give same IP for PIX outside interface and for PAT clients?
(I guess it's ok, since it is similar to as using the PIX DHCP client, isn't it?)

Can internal servers be supported?

Or in these cases we must use PAT in the outside router/device to overcome the problems?

Thanks
Yizhar
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[Bluecrack]

I think I ran across a command to do this a few weeks ago and I meant to keep track of it but forgot. If any one else knows if this can be done, please post.

Thanks,
Bluecrack

 

[mavenccie]

The commands you are looking for are:
ip address outside dhcp setroute
global (outside) 1 interface

 

[yizhar]

HI
Thanks for the replies.

So what I understand is that:
* If the PIX is going to be a DHCP client, I should use these:
ip address outside dhcp setroute
global (outside) 1 interface

* If the PIX will have a single static registered IP I should use:
ip address outside 111.111.111.111 255.255.255.0
global (outside) 1 interface

* If I want to allow access to internal servers, I have a problem and must have more IP addresses, or is there other way?

Please correct me if I'm wrong.

Thanks
Yizhar

Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[mavenccie]

You got it. -Later