question about cisco pix licenses

yongitz · 08-15-2007, 03:30 AM

Hi folks! I know this might not fit into this category.. but if anybody can help me with this issue I'll be grateful for your responses.

We are planning to buy a new Cisco PIX 501 with a default package of 10 licenses?

What does 10 implicate? What is it for?

Thanks..

Ignore this one..
Just got the info from the cisco site.. Thanks!

acid_kewpie · 08-16-2007, 03:36 AM

yeah, this is really not the right forum at all, i.e. not a Cisco forum but a Linux one... however...

We actually just got caught out by this the other day. 10 users is 10 internal arp entries. we had 12 clients in a site, some of whom had not previously used the network much. when they started to, at any given time 2 machines could not leave the site, as the arp table wouldn't add the new entries at all. ouch. upgraded to the 50 user license, and all is sweet.

yongitz · 08-17-2007, 03:26 AM

Hi! Since you have replied to my thread I might as well clarify things out.. If I have say 20 machines behind a router, and the router is connected to the PIX. Will PIX know that there are multiple machines behind it or it will just recognize only the router? Thanks..

acid_kewpie · 08-17-2007, 03:58 AM

i'd like to say that as it's on a different subnet that no, it's not going to affect it, but i really don't know. there's only one MAC address in the equation, but maybe there are other devious tricks i'm not aware of. I do know that somethign as scraweny as a 501 isn't meant to be infront of multiple routed LAN's though.

oh hang on.. just checked google. says it's the number of ip addresses on the inside interface, not mac's, so unless you're actually proxying traffic, or source natting it on the router, they would also fail past 10 (including the router itself, so you could only have 9 ip's behind the router... )

yongitz · 08-17-2007, 04:43 AM

Quote:

Originally Posted by acid_kewpie

i'd like to say that as it's on a different subnet that no, it's not going to affect it, but i really don't know. there's only one MAC address in the equation, but maybe there are other devious tricks i'm not aware of. I do know that somethign as scraweny as a 501 isn't meant to be infront of multiple routed LAN's though.

oh hang on.. just checked google. says it's the number of ip addresses on the inside interface, not mac's, so unless you're actually proxying traffic, or source natting it on the router, they would also fail past 10 (including the router itself, so you could only have 9 ip's behind the router... )

so u mean if i am source natting, the pix would only recognize 1 ip(the ip of the router) no matter how many machines are behind it. i would really like to clarify this thing bcoz if that's the case it would ease my work and be saved from upgrading the licenses.

acid_kewpie · 08-17-2007, 08:58 AM

i *expect* that is what would happen, i don't know for sure.

yongitz · 08-17-2007, 12:06 PM

Whew! Thanks! I'd reply as soon as a I have my pix..

Thanks! You have been of helped for me many times..