Re: urgent PIX help AGAIN

2000-10-03 Thread Jim Bond

Thank you!

One more question: when I configure PIX as DHCP
server, it only allows 10 addresses in the pool. 
Here is what I got:

pixfirewall(config)# dhcpd address
10.1.1.101-10.1.1.150 inside
Number of addresses exceeds limit

Is 10 max?

Thanks in advance.



Jim

--- Todd Plambeck <[EMAIL PROTECTED]> wrote:
> In the new version of PIX software 5.2(1) you can
> nat to an interface.
> Instead of the old command "global (outside) 1
> x.x.x.x"  use the command
> " global (outside) 1 interface ". You can read up on
> this new feature at:
> 
>
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v52/pixrn522.htm#xtocid752631
> 
> I hope this helps.
> 
> Todd
> CCNP/CCDP
> 
> Jim Bond wrote:
> 
> > Hello,
> >
> > I have only 1 ip address assigned by my ISP, how
> can I
> > use PIX to do NAT? Looks like PIX requires at
> least 2
> > outside ip addresses, one for outside interface,
> one
> > for PAT. Is there a way to use only 1 ip address?
> >
> > Thanks in advance.
> >
> > Jim
> >
> > __
> > Do You Yahoo!?
> > Yahoo! Photos - 35mm Quality Prints, Now Get 15
> Free!
> > http://photos.yahoo.com/
> >
> > **NOTE: New CCNA/CCDA List has been formed. For
> more information go to
> > http://www.groupstudy.com/list/Associates.html
> > _
> > UPDATED Posting Guidelines:
> http://www.groupstudy.com/list/guide.html
> > FAQ, list archives, and subscription info:
> http://www.groupstudy.com
> > Report misconduct and Nondisclosure violations to
> [EMAIL PROTECTED]
> 


__
Do You Yahoo!?
Yahoo! Photos - 35mm Quality Prints, Now Get 15 Free!
http://photos.yahoo.com/

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: urgent PIX help AGAIN

2000-10-03 Thread Greg Reaume

I just installed a PIX-506 and 10 was the max.  I believe, though am not
certain, this is the case accross all hardware platforms running 5.2
software.

HTH

Greg


"Jim Bond" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Thank you!
>
> One more question: when I configure PIX as DHCP
> server, it only allows 10 addresses in the pool.
> Here is what I got:
>
> pixfirewall(config)# dhcpd address
> 10.1.1.101-10.1.1.150 inside
> Number of addresses exceeds limit
>
> Is 10 max?
>
> Thanks in advance.
>
>
>
> Jim
>
> --- Todd Plambeck <[EMAIL PROTECTED]> wrote:
> > In the new version of PIX software 5.2(1) you can
> > nat to an interface.
> > Instead of the old command "global (outside) 1
> > x.x.x.x"  use the command
> > " global (outside) 1 interface ". You can read up on
> > this new feature at:
> >
> >
>
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v52/pixrn522.h
tm#xtocid752631
> >
> > I hope this helps.
> >
> > Todd
> > CCNP/CCDP
> >
> > Jim Bond wrote:
> >
> > > Hello,
> > >
> > > I have only 1 ip address assigned by my ISP, how
> > can I
> > > use PIX to do NAT? Looks like PIX requires at
> > least 2
> > > outside ip addresses, one for outside interface,
> > one
> > > for PAT. Is there a way to use only 1 ip address?
> > >
> > > Thanks in advance.
> > >
> > > Jim
> > >
> > > __
> > > Do You Yahoo!?
> > > Yahoo! Photos - 35mm Quality Prints, Now Get 15
> > Free!
> > > http://photos.yahoo.com/
> > >
> > > **NOTE: New CCNA/CCDA List has been formed. For
> > more information go to
> > > http://www.groupstudy.com/list/Associates.html
> > > _
> > > UPDATED Posting Guidelines:
> > http://www.groupstudy.com/list/guide.html
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com
> > > Report misconduct and Nondisclosure violations to
> > [EMAIL PROTECTED]
> >
>
>
> __
> Do You Yahoo!?
> Yahoo! Photos - 35mm Quality Prints, Now Get 15 Free!
> http://photos.yahoo.com/
>
> **NOTE: New CCNA/CCDA List has been formed. For more information go to
> http://www.groupstudy.com/list/Associates.html
> _
> UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
> FAQ, list archives, and subscription info: http://www.groupstudy.com
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: urgent PIX help AGAIN

2000-10-03 Thread Sam Munzani

YES. PIX506 is made for small office with less than 10 computers. If you
have more, keep DHCP services on your NT or Novell server.

Sam
> Thank you!
>
> One more question: when I configure PIX as DHCP
> server, it only allows 10 addresses in the pool.
> Here is what I got:
>
> pixfirewall(config)# dhcpd address
> 10.1.1.101-10.1.1.150 inside
> Number of addresses exceeds limit
>
> Is 10 max?
>
> Thanks in advance.
>
>
>
> Jim
>
> --- Todd Plambeck <[EMAIL PROTECTED]> wrote:
> > In the new version of PIX software 5.2(1) you can
> > nat to an interface.
> > Instead of the old command "global (outside) 1
> > x.x.x.x"  use the command
> > " global (outside) 1 interface ". You can read up on
> > this new feature at:
> >
> >
>
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v52/pixrn522.h
tm#xtocid752631
> >
> > I hope this helps.
> >
> > Todd
> > CCNP/CCDP
> >
> > Jim Bond wrote:
> >
> > > Hello,
> > >
> > > I have only 1 ip address assigned by my ISP, how
> > can I
> > > use PIX to do NAT? Looks like PIX requires at
> > least 2
> > > outside ip addresses, one for outside interface,
> > one
> > > for PAT. Is there a way to use only 1 ip address?
> > >
> > > Thanks in advance.
> > >
> > > Jim
> > >
> > > __
> > > Do You Yahoo!?
> > > Yahoo! Photos - 35mm Quality Prints, Now Get 15
> > Free!
> > > http://photos.yahoo.com/
> > >
> > > **NOTE: New CCNA/CCDA List has been formed. For
> > more information go to
> > > http://www.groupstudy.com/list/Associates.html
> > > _
> > > UPDATED Posting Guidelines:
> > http://www.groupstudy.com/list/guide.html
> > > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com
> > > Report misconduct and Nondisclosure violations to
> > [EMAIL PROTECTED]
> >
>
>
> __
> Do You Yahoo!?
> Yahoo! Photos - 35mm Quality Prints, Now Get 15 Free!
> http://photos.yahoo.com/
>
> ___
> To unsubscribe from the CCIELAB list, send a message to
> [EMAIL PROTECTED] with the body containing:
> unsubscribe ccielab
>

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: urgent PIX help AGAIN

2000-10-03 Thread Asbjorn Hojmark

> One more question: when I configure PIX as DHCP server, it
> only allows 10 addresses in the pool.

> Is 10 max?

Yes, 10 is max. It's in the command reference.

The PIX wasn't meant to be a large-scale DHCP server. It's a
firewall and if you need extensive DHCP server capabilities,
you should run that on another platform.

-A
--
Heroes: Vint Cerf & Bob Kahn, Leonard Kleinrock, Robert Metcalfe
Links : http://www.hojmark.org/networking/


**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]