Re: urgent PIX help

2000-10-01 Thread Brad Ellis
Not that Im aware of. I thought you need (2) IPs to do NAT on a PIX (one for the external interface, and one for the NAT statement). I could be wrong...(it's happened before, once or twice! :) -Brad Ellis CCIE#5796 [EMAIL PROTECTED] used cisco hardware: www.optsys.net cisco certification news

Re: urgent PIX help

2000-10-02 Thread Todd Plambeck
In the new version of PIX software 5.2(1) you can nat to an interface. Instead of the old command "global (outside) 1 x.x.x.x" use the command " global (outside) 1 interface ". You can read up on this new feature at: http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v52/pixrn522.ht

Re: urgent PIX help

2000-10-02 Thread Sam Munzani
PIX 5.21 code is out now. It supports hiding behind interface IP address. Sam > Hello, > > I have only 1 ip address assigned by my ISP, how can I > use PIX to do NAT? Looks like PIX requires at least 2 > outside ip addresses, one for outside interface, one > for PAT. Is there a way to use only

RE: urgent PIX help

2000-10-02 Thread Asbjorn Hojmark
> I have only 1 ip address assigned by my ISP, how can I use > PIX to do NAT? Looks like PIX requires at least 2 outside ip > addresses, one for outside interface, one for PAT. Is there a > way to use only 1 ip address? PIX software 5.2(1) allows you to do this, sort of like the IOS 'overload' pa

Re: urgent PIX help AGAIN

2000-10-03 Thread Jim Bond
Thank you! One more question: when I configure PIX as DHCP server, it only allows 10 addresses in the pool. Here is what I got: pixfirewall(config)# dhcpd address 10.1.1.101-10.1.1.150 inside Number of addresses exceeds limit Is 10 max? Thanks in advance. Jim --- Todd Plambeck <[EMAIL PRO

Re: urgent PIX help AGAIN

2000-10-03 Thread Greg Reaume
I just installed a PIX-506 and 10 was the max. I believe, though am not certain, this is the case accross all hardware platforms running 5.2 software. HTH Greg "Jim Bond" <[EMAIL PROTECTED]> wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Thank you! > > One more question: when

Re: urgent PIX help AGAIN

2000-10-03 Thread Sam Munzani
YES. PIX506 is made for small office with less than 10 computers. If you have more, keep DHCP services on your NT or Novell server. Sam > Thank you! > > One more question: when I configure PIX as DHCP > server, it only allows 10 addresses in the pool. > Here is what I got: > > pixfirewall(config)

RE: urgent PIX help AGAIN

2000-10-03 Thread Asbjorn Hojmark
> One more question: when I configure PIX as DHCP server, it > only allows 10 addresses in the pool. > Is 10 max? Yes, 10 is max. It's in the command reference. The PIX wasn't meant to be a large-scale DHCP server. It's a firewall and if you need extensive DHCP server capabilities, you should r