?
Solved

Two IPs on same port?

Posted on 2006-04-19
6
Medium Priority
?
172 Views
Last Modified: 2010-04-09
A client has a pix 501.  He had one IP address range for the last couple of years.  Now he needed another. So he called the ISP and they gave him a new Network/IP address.  The Question:  Can I use both network/IP address ranges on the pix at the same time?  If so please explain how.

The current setup:
public IP:  216.83.100.146
gateway:  216.83.100.154


The new one:
public IP:  209.11.239.198
gateway:  209.11.239.197
mask of 255.255.255.252
0
Comment
Question by:cyberlew
  • 4
  • 2
6 Comments
 
LVL 32

Expert Comment

by:rsivanandan
ID: 16488792
ISP is going to route both the address range back to that PIX so you can use it the way you want it.

Now as I understand from your statement, he has been having the first one for quite some time so PIX is configured with that. You can use the second range to do like Static Natting for servers etc? It would be easy if we know why the client needed another??? That is what you would use this ip range.

Cheers,
Rajesh
0
 

Author Comment

by:cyberlew
ID: 16490019
They want to use it for rdp to a second server.  One option they have is to use a different port on the current public IP.  So, back to the issue,  how do you tell the pix both IP addresses are assinged to the single pix port?  Or are you telling me that the ISP wll convert the new range to the old range and forward it to their pix???  That sound like crazy talk if I understand what your saying.
0
 
LVL 32

Accepted Solution

by:
rsivanandan earned 900 total points
ID: 16490130
No. the ISP will not convert nothing. What they will do from now is to forward traffic addresses to first address range and second address range to your PIX and that is how it works.

You can use the new IP range for your RDP, don't use the existing one to port forward. Do something like this;

static(inside,outside) tcp <NewPublicIP> 3389 <InternalRDPHost> 3389

access-list 100 permit tcp <foreignIP> host <NewPublicIp> eq 3389

access-group 100 in interface outside

Or you can make the access-list entry part of the ones you already might have.

Cheers,
Rajesh
0
What Security Threats Are We Predicting for 2018?

Cryptocurrency, IoT botnets, MFA, and more! Hackers are already planning their next big attacks for 2018. Learn what you might face, and how to defend against it with our 2018 security predictions.

 
LVL 32

Expert Comment

by:rsivanandan
ID: 16490161
No, on how PIX will understand the new ip range even though it is not assigned to any of the ports;

When you define a static entry, it understands to listen on all the ip's listed in the PIX configuration via a Static and that is how it works. So as long as your ISP forwards it to you, it will work.

Cheers,
Rajesh
0
 

Author Comment

by:cyberlew
ID: 16509306
Thanks For the help!!
0
 
LVL 32

Expert Comment

by:rsivanandan
ID: 16509584
No Problem.

Cheers,
Rajesh
0

Featured Post

A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…
Suggested Courses

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question