Simple question re global pool

[takefreestuff]

My ISP is feeding me a wireless broadband connection to a "router" (their word...) which, as it turns out, doesn't actually route (it simply converts radio to ethernet).

The ISP is routing to an IP (call it 175.1.1.133/28) that is not on the same subnet as the range of usable IPs they have given me (call this 175.1.1.33/29).

I want to use private IPs on the inside NATing to the global pool provided by the ISP. The ISP is saying I should apply 175.1.1.133 to my outside interface and set up the glbal pool from 175.1.1.33/29).

However, I thought the global pool had to be on the same subnet as the ethernet0, and that if I want to use PAT the global IP cannot be identical to that of ethernet0.

Am I right? Or is there a way for me to connect directly to this "router" without having to put a real router outside the PIX?

Thanks.

 

[chicocouk]

Ip you want to use PAT the global ip address *CAN* be identical to ethernet0. But you don't actually want to do that, do you?

I would just try it and see if it works;

ip address outside 175.1.1.133 255.255.255.240
global (outside) 1 175.1.1.33-175.1.1.38 netmask 255.255.255.248

The isp must have something in their config saying route traffic destined for 175.1.1.33/29 via 175.1.1.133

If so, it will probably work.

Chico

CCNA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP

 

[takefreestuff]

Thanks Chico. I've set it up like that and asked my ISP to route to the pool...