subnetting issues w/o NAT

[Adr3nalin]

Hi,

i've got a range external/internet ip address for example:
from 1.1.1.1 to 1.1.1.30.
the upper FW use 1.1.1.65 address.

what ip address and subnet i need to assign to outside interface, and inside interface of my firewall ? the inside should use the ip addresses without NATing.

so the firewall only function as ip filtering,

any help would be appreciated...

thanks

 

[tbissett]

Seem to be a lot of TCP/IP subnetting questions on the forum this week

Anyway, Can you list the entire range of usable IPs you have? That will make it easier to figure out the subnet mask.

 

[Adr3nalin]

Hi, i've got 1.1.1.1 to 1.1.1.30

cheers

 

[308win]

this will allow any and all traffic through, squelch it accordingly with your access-list. (ie access-list outside-in permit tcp any 1.1.1.2 255.255.255.255 eq 80 --->if host 1.1.1.2 is a web server)

access-list outside-in permit ip any 1.1.1.0 255.255.255.240
access-group outside-in in interface outside
static (inside,outside) 1.1.1.0 1.1.1.0 255.255.255.240