Solved

506E - more than one outside IP?

Posted on 2004-08-23
4
134 Views
Last Modified: 2010-04-09
We have dual T1s coming into our 506E - and to the internet we have 255 IPs.  We have about 5 servers behind the firewall, i was wondering if it was possible with the 506 to do a NAT of the external straight to the internal?  If so, what do i need to assign the eth0 (outside) IP to?  and do i just create statics & access-lists to do the straight nat?

Thanks,
Nick
0
Comment
Question by:NickUA
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 11874909
Yes, you can create multiple internal-to-external static NAT translations:

static (inside,outside) <public ip1> <private IP1> netmask 255.255.255.255
static (inside,outside) <public ip2> <private IP2> netmask 255.255.255.255
static (inside,outside) <public ip3> <private IP3> netmask 255.255.255.255

Etc..

0
 
LVL 79

Expert Comment

by:lrmoore
ID: 11874929
>We have dual T1s coming into our 506E
I would say that actually you have a router in front of your PIX that connects to dual T1's. Are both T1's to the same ISP?
How many users do you support on the internal network, or is this mainly for inbound traffic to servers? The 506 was not designed as a datacenter firewall, it is more of a small-business box <50 users..
0
 
LVL 1

Author Comment

by:NickUA
ID: 11883383
only 5 or so users on the inside - just developers - the T1s are for basic web servers and the like.

506 okay irmoore?  when our budget permits we'll probably get a 515.

Thanks,
Nick
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 11883613
You should be OK until your budget grows...

0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cisco ASA 5505 NAT question 8 125
WEBSITE Capture via Linux Router 2 105
Firewall vs WYSIWYG editor 5 83
Block file sharing site (Dropbox, Google Drive) for only some users 10 52
Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question