[c-nsp] Cisco Pix. Global command

Dan method at b.astral.ro
Fri Oct 3 11:33:07 EDT 2008


global (outside) 2 interface

Dan
John Ramz wrote:
> OS 7
>
> I only have 2 Public Ip addresses:
>
> 2.1.1.2: In the ROuter
> 2.1.1.3
>
> I am configuring this firewall very basic:
>
>
> Ethernet0: outside Ip address: 2.1.1.3
> Ethernet1: inside  Ip address: 192.168.254.253
>
>  
> global (outside) 1 2.1.1.3
> nat (inside) 1 192.168.254.0 255.255.255.0 0 0
> route external 0.0.0.0 0.0.0.0 2.1.1.2 1
>
> access-list outbound permit tcp 192.168.254.0 255.255.255.0 any eq 80
> access-group outbound in interface inside 
>
>
> You might point out something else if you think it is needed. Since I only have 2 Public Ip addresses, can I use the outside interface ip address for the global command?
>
>
>
>
>
> Thanks
>
> John
>
>
>
>
>
>
>
>       
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>   



More information about the cisco-nsp mailing list