RE: Pix 506 question

From: Huy Luu (hluu@veroxity.com)
Date: Mon Nov 11 2002 - 21:05:22 GMT-3


Actually, the PIX acl uses a normal match 1 bit subnet mask unlike the IOS
acl which uses inverse subnet mask.

                                                                                                              
                    "Desimone,
                    Aurelio" To: "'Pratt, Jeremy'" <JPratt@coh.org>, ccielab@groupstudy.com
                    <ADesimone@ref cc:
                    co.com> Subject: RE: Pix 506 question
                    Sent by:
                    nobody@groupst
                    udy.com
                                                                                                              
                                                                                                              
                    11/11/02 04:50
                    PM
                    Please respond
                    to "Desimone,
                    Aurelio"
                                                                                                              
                                                                                                              

No, you cannot put two IPs on one interface on a pix. Also, the acls of
ios
and pix are very similar and you could probably copy and paste.

Aurelio
10267

-----Original Message-----
From: Pratt, Jeremy [mailto:JPratt@coh.org]
Sent: Monday, November 11, 2002 12:20 PM
To: ccielab@groupstudy.com
Subject: Pix 506 question

Is it possible to stack subnets using secondary addressing on the internal
NIC of the pix 506? ie:
ip address 208.x.x.x 255.255.255.0 secondary
ip address 10.2.1.1 255.255.0.0 secondary
ip address 207.x.x.x 255.255.255.0

Is there a quick and easy way to migrate an ACL from IOS to Pix that anyone
knows of?

Jeremy Pratt
Network Manager
CCNP, CCDP, CCSA, CCSE



This archive was generated by hypermail 2.1.4 : Tue Dec 03 2002 - 07:22:57 GMT-3