Adding IP Addresses to Your Server's Cisco PIX Hardware Firewall Device Manager (Traditional)
Some of the information in this article is advanced material we make available as a courtesy. Please be advised that you are responsible for properly following the procedures below. Customer Support cannot assist with these topics.
When you receive additional IPs for your server, you have to configure your server and firewall to accept requests from them.
Note: We configure all of your server's IP addresses automatically whenever you reprovision your server. However, reprovisioning erases all content from your server's hard drives. For more information, see Starting over with My Server (Reprovision)
We automatically configure additional IP addresses for Virtual Private Servers (VPS).
To configure additional IPs, you must create two static translation rules, one outside traffic and one for inside traffic.
Note: For this example, we assume that the next available internal IP address is 10.0.0.2.
To Add an IP Address to the Cisco PIX 501 Firewall
- In a Web browser, navigate to: https://[your firewall management IP address]/
- You may receive a number of security certificate warnings. If you accept the certs and save them as "Trusted," you will avoid warnings in the future.
- Enter your User name and Password, and then click OK.
Note: Your browser must have Java enabled and allow pop-ups from your firewall management IP.
- In the Device Manager toolbar, click the Configuration icon.
- Click the Translation Rules tab.
- Click the Translation Rules radio button.
- Click the New Rule icon.
- In the window, enter the following information:
- Interface: Inside
- IP Address: 10.0.0.2
- Mask: 255.255.255.255
- Translate address on interface: outside
- Translate address to: select (x) static IP Address: Enter your new IP address.
- Click the New Rule icon.
- In the window, enter the following information:
- Interface: Outside
- IP Address: Enter your new IP address.
- Mask: 255.255.255.255
- Translate address on interface: inside
- Translate address to: select (x) static IP Address: 10.0.0.2
Now you must add the internal IP address to your server. The process differs depending on your server's operating system.
Linux
For Fedora/CentOS
- At root, copy
"/etc/sysconfig/network-scripts/ifcfg-eth0
to/etc/sysconfig/network-scripts/ifcfg-eth0:0. - Edit
/etc/sysconfig/network-scripts/ifcfg-eth0:0, changing the IP to the new internal IP, and changing DEVICE toeth0:0. - Restart the network service using this command: service network restart.
For Ubuntu
- Edit
/etc/network/interfaces. - Add the following lines to the bottom of the file: # The secondary network interface
auto eth0:0
iface eth0:0 inet static
address 10.0.0.2
netmask 255.255.255.0 - Restart the network service using the following command: /etc/init.d/networking restart
Windows
- Access your server via Remote Desktop. For more information, see Connect via Remote Desktop (RDC) to your Windows server.
- From the Start menu, select Network.
- In the upper-left, double-click Network and Sharing Center.
- On the left, click Change Adapter Settings.
- Right-click Local Area Connection, and then select Properties.
- Select Internet Protocol Version 4 (TCP/IPv4), and then click Properties.
- Select Use the following IP address, complete the following fields, and then click OK:
- IP Address — Enter your server's new internal IP address.
- Subnet Mask — Type
255.255.255.0
Note: We monitor IP address allocation. Attempting to add IP addresses to your server that you did not purchase violates your terms of service agreement and may result in the suspension of your account.
