RE: Pix 506 question

From: Desimone, Aurelio (ADesimone@refco.com)
Date: Tue Nov 12 2002 - 23:44:00 GMT-3


Yes, you are right.. sorry about that

-----Original Message-----
From: Huy Luu [mailto:hluu@veroxity.com]
Sent: Monday, November 11, 2002 6:05 PM
To: Desimone, Aurelio
Cc: ccielab@groupstudy.com; 'Pratt, Jeremy'; nobody@groupstudy.com
Subject: RE: Pix 506 question

Actually, the PIX acl uses a normal match 1 bit subnet mask unlike the IOS
acl which uses inverse subnet mask.

 

                    "Desimone,

                    Aurelio" To: "'Pratt, Jeremy'"
<JPratt@coh.org>, ccielab@groupstudy.com
                    <ADesimone@ref cc:

                    co.com> Subject: RE: Pix 506 question

                    Sent by:

                    nobody@groupst

                    udy.com

 

 

                    11/11/02 04:50

                    PM

                    Please respond

                    to "Desimone,

                    Aurelio"

 

 

No, you cannot put two IPs on one interface on a pix. Also, the acls of
ios
and pix are very similar and you could probably copy and paste.

Aurelio
10267

-----Original Message-----
From: Pratt, Jeremy [mailto:JPratt@coh.org]
Sent: Monday, November 11, 2002 12:20 PM
To: ccielab@groupstudy.com
Subject: Pix 506 question

Is it possible to stack subnets using secondary addressing on the internal
NIC of the pix 506? ie:
ip address 208.x.x.x 255.255.255.0 secondary
ip address 10.2.1.1 255.255.0.0 secondary
ip address 207.x.x.x 255.255.255.0

Is there a quick and easy way to migrate an ACL from IOS to Pix that anyone
knows of?

Jeremy Pratt
Network Manager
CCNP, CCDP, CCSA, CCSE



This archive was generated by hypermail 2.1.4 : Tue Dec 03 2002 - 07:22:58 GMT-3