In this design the CPE router IS the border router. Whatever controls the customer would like to exercise (e.g. packet filters, ACL, etc) would really be best if placed on the CPE device. Maybe the service provider will configure their router by request.
How many interfaces in the Pix? If there are only 2, the best solution is to place the "border router" on the inside. LAN ---- Border Router ---- Pix ---- CPE Router This would allow for a screened subnet (dmz). Jay Dunn IPI*GrammTech, Ltd. www.ipi-gt.com Nunquam Facilis Est -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 18, 2003 3:42 AM To: [EMAIL PROTECTED] Subject: pix + router, design issue [7:63244] I have a case with a customer that I am installing a PIX and a border router for, He want4s to have controle over the border router, but the Service Provider, is providing their router as the CPE. one interface on the Service Providers router has an ip address from the customers public ip address range, so I am thinking about what would be the best way to config the customers border router, as it will need to be sending some ip address that is on the interface connected to the CPE router back to the pix. ------------ ------------ ------------ - - - - - - - -************- -************- - - - - - - - ------------ ------------ ------------ PIX 213.100.1.10 Border Router CPE Router 213.100.1.1 I am beeing a little slow to day, so I would like to get some input on how you would handle this secenario. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=63332&t=63244 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
