Firewall Wizards mailing list archives

RE:PIX-520 help...


From: "R. Corona" <goniners () home com>
Date: Thu, 23 Aug 2001 08:39:48 -0400

Thanks so much everyone ... I changed the global command to reflect IP's
that are on a range of outside "real" IP's, and it works!!

  I still have one question though.  If one only has a single public
internet IP, how can you issue the global statement in a proper way?  If my
outside ip is 65.8.165.98 , and I issue the global command "global (outside)
1 65.8.165.99-65.8.165.254 netmask 255.255.255.0 it works just fine.  But is
it actually using the public IP's .99 - 254?  Or are these IP's used in a
virtual sense?  I tried to use only my own IP, but the PIX refused to use
it's own outside IP as it's global ID.  In my case can I use the range
65.8.165.99-65.8.165.254 without causing a conflict with the registerred
users of those public IP's?  What is the minimum number of outside IP's one
must have for the PIX to function properly doing NAT?

Thanks a lot,

Ross

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards


Current thread: