When it is possible, users of unregistered (or "dirty") networks should use the reserved addresses in RFC 1918 on any networks inside the PIX.
There are no specific requirements for this document.
This document is not restricted to specific software and hardware versions.
For more information on document conventions, refer to the Cisco Technical Tips Conventions.
As discussed in RFC 1918, the addresses that you should use are shown here.
Class A: 10.0.0.0 - 10.255.255.255 (10/8 prefix)
Class B: 172.16.0.0 - 172.31.255.255 (172.16/12 prefix)
Class C: 192.168.0.0 - 192.168.255.255 (192.168/16 prefix)
There are two advantages of using these numbers on the inside of the PIX.
You can grow your internal IP networks without worrying about running out of addresses.
You can eliminate the risk of inadvertently using other networks' legitimate addresses.
For example, if you use the Class C range of 18.104.22.168 for network addresses on the inside of your PIX, your computers are unable to connect to another machine that has a legitimate IP address (such as 22.214.171.124). This is because your hosts try to reach a machine that does not exist on the inside of your firewall.
The Cisco Support Community is a forum for you to ask and answer questions, share suggestions, and collaborate with your peers.
Refer to Cisco Technical Tips Conventions for information on conventions used in this document.