From: Pratt, Jeremy (JPratt@coh.org)
Date: Wed Nov 13 2002 - 14:56:09 GMT-3
That was my fear. He can't change the server IP's. I got an idea from Clay
Maney on this group to allow the pix pass the 207 and 208 traffic and point
the DG for those to the internal router, let it route that traffic from
10.2.x.x to the other subnets.
-----Original Message-----
From: Chris Johnston [mailto:chris@routerguy.com]
Sent: Tuesday, November 12, 2002 9:51 PM
To: Desimone, Aurelio; 'Huy Luu'
Cc: ccielab@groupstudy.com
Subject: RE: Pix 506 question
The PIX allows ONE AND ONLY ONE Ip address on any interface.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Desimone, Aurelio
Sent: Tuesday, November 12, 2002 6:44 PM
To: 'Huy Luu'
Cc: ccielab@groupstudy.com
Subject: RE: Pix 506 question
Yes, you are right.. sorry about that
-----Original Message-----
From: Huy Luu [mailto:hluu@veroxity.com]
Sent: Monday, November 11, 2002 6:05 PM
To: Desimone, Aurelio
Cc: ccielab@groupstudy.com; 'Pratt, Jeremy'; nobody@groupstudy.com
Subject: RE: Pix 506 question
Actually, the PIX acl uses a normal match 1 bit subnet mask unlike the IOS
acl which uses inverse subnet mask.
"Desimone,
Aurelio" To: "'Pratt, Jeremy'"
<JPratt@coh.org>, ccielab@groupstudy.com
<ADesimone@ref cc:
co.com> Subject: RE: Pix 506 question
Sent by:
nobody@groupst
udy.com
11/11/02 04:50
PM
Please respond
to "Desimone,
Aurelio"
No, you cannot put two IPs on one interface on a pix. Also, the acls of
ios
and pix are very similar and you could probably copy and paste.
Aurelio
10267
-----Original Message-----
From: Pratt, Jeremy [mailto:JPratt@coh.org]
Sent: Monday, November 11, 2002 12:20 PM
To: ccielab@groupstudy.com
Subject: Pix 506 question
Is it possible to stack subnets using secondary addressing on the internal
NIC of the pix 506? ie:
ip address 208.x.x.x 255.255.255.0 secondary
ip address 10.2.1.1 255.255.0.0 secondary
ip address 207.x.x.x 255.255.255.0
Is there a quick and easy way to migrate an ACL from IOS to Pix that anyone
knows of?
Jeremy Pratt
Network Manager
CCNP, CCDP, CCSA, CCSE
This archive was generated by hypermail 2.1.4 : Tue Dec 03 2002 - 07:22:58 GMT-3