PIX doesn't support multiple ip's on interfaces. If you have an extra interface on the pix available you can make that interface outside2 with a sec level of like 5. Apply the nat and corresponding global pools to that interface. Then add a second default route out the with a metric of like 5. Theoretically it should failover to the second interface, but it's hit and miss from what I have dealt with.
Cheers, Eric Six Eric S!x [EMAIL PROTECTED] Network Specialist Sirsi Corporation +1.800.372.8527 +1.314.432.1100.356 -----Original Message----- From: Mike Carney [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 02, 2002 10:47 AM To: [EMAIL PROTECTED] Subject: Pix Question Hello All, Thanks in advance to those who reply. I have run into a situation where I am transferring ISPs. The original ISP is passing the IP information through the serial connection to the ethernet interface. My PIX firewall is then connected to this interface via a hub and we use net for the other addresses in our subnet. My question is this: Since I do not wish to purchase another router or firewall for the new connection BUT I need them both up at the same time temporarily how do I do this? I am think that I can assign a second network to the ethernet interface of the router without any problem. Does anyone know if the Pix can have two external networks bound to the same interface? I would think it possible since people have multiple subnets sometimes from the same provider. If anyone has any thoughts please let me know. Thanks! Mike
