asked on

Cisco PIX 501: Ouside/Inside on same subnet?

All,

Is it possible to have an outside IP of 192.168.1.100/24 and an inside IP of 192.168.1.101/24?

I am securing a network segment and I want to do this so that all PCs outside the firewall have 192.168.1.2-99/24 and all PC's on the inside have 192.168.1.102-199/24 and I can restrict the traffic between the two segments.

All IP's on my network are static and I will not be using the PIX's DHCP feature on the inside.

Thanks!

Mike

ASKER CERTIFIED SOLUTION

Pete Long

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Pete Long

Network address Subnet Subnet Size Usable IPs Broadcast address
192.168.1.0 255.255.255.128 126 192.168.1.1 to 192.168.1.126 192.168.1.127
192.168.1.128 255.255.255.128 126 192.168.1.129 to 192.168.1.254 192.168.1.255

Pete Long

^^^^^^^^formatting screwed up but you get the picture

jbisordi

ASKER

Thanks for the info Pete.

So just to be clear: it is not possible to place my 501 between two networks that use the same subnet, even if the IP's on the interfaces and the clients on each site are all unique...is that correct?

Pete Long

Thats correct yes