interfaces in same IP range

I have a PIX 515 I am trying to configure on a network.
This firewall was running 5.1 and was recently upgraded to 6.3.5.
I have applied a new activation key from Cisco.
The old config had the inside IP's:
outside 10.68.226.130 255.255.255.192
inside 10.68.226.65 255.255.255.192
route 0.0.0.0 0.0.0.0 10.68.226.121 1
static (inside,outside) 10.68.226.66 10.68.226.66 netmask 255.255.255.255 0 0

I have the firewall setup in a lab now.  I am trying to change the outside to 192.168.1.1 and inside to 192.168.1.2 my dsl router is 192.168.1.254.
I can set the outside ip but when I set the inside i get sorry not allowed to enter IP address on same network as interface 0.

However, if I use outside 10.68.226.65 255.255.255.192 inside 10.68.226.130 255.255.255.192 it takes it.
I have tried 192.168.1.1 and 192.168.1.253 as outside but it would not take that in a 255.0 subnet.

Is this new with 6.3.5?
Heath CalhounAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

SteveH_UKCommented:
The 192.168.1.xxx IP addresses are part of the standard class-C private networking range which specifies that 192.168.x.y addresses form a set of 256 distinct private networks each with a subnet mask 255.255.255.0.  This means that each value of 'x' represents a different network.

The problem you are getting is that 192.168.1.1 and 192.168.1.2 are addresses in the same subnet.  Since you do not route between IP addresses in the same subnet, your router is complaining.  Instead, you need to use different subnets on your internal and external interfaces.  The easiest solution may be to change the 'x' on your internal side, so that you use 192.168.1.1 as outside and 192.168.2.1 as inside.

Here's a technical introduction to IP addressing and routing: http://www.cisco.com/warp/public/701/3.html.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Heath CalhounAuthor Commented:
After falling asleep woke up remembering the subnet calculator i looked at.  .65 and .130 were outside the .66-.126 range.

Thanks.
0
SteveH_UKCommented:
Glad you're sorted :)
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Hardware Firewalls

From novice to tech pro — start learning today.