Dynamic Outside Translation

Have a question or want to start a discussion? Post it! No Registration Necessary.  Now with pictures!

Threaded View


Can anyone help me understand somethign I have read in Cisco Press PIX book.

It relates to the above. In brief the outside network is 172.26.26.0 /24 the
inside network is 10.0.0.0 /24. The example allows hosts on the outside
network to access the FTP server on the LAN at 10.0.2.2 which sites behind
another router on the inside of the PIX.

The book states that Dynamic outside translations simplify the routing on
the network below i.e router on 10.0.2.0 wouldn't need route to 172.26.26.0
because of NAT - which I can understand.

So:

outside router --------PIX----------Inside Router-------------Inside
Router-------------------FTP server

172.26.26.0                    10.0.0.0                        10.0.1.0
10.0.2.0               10.0.2.2

commands are:

nat (outside) 1 172.26.26.0 255.255.255.0 outside
global (inside) 1 10.0.0.20-10.0.0.254 netmask 255.255.255.0
static (inside, outside) 10.0.2.2 10.0.2.2
access-list ACLIN permit tcp 172.26.26.0 255.255.255.0 host 10.0.2.2 eq ftp
access-group ACLIN in interface outside

I built this in a lab earlier and know that it works but I don't understand
why I need the static (inside, outside) 10.0.2.2 10.0.2.2 translation.

Regards

Darren




Re: Dynamic Outside Translation


Apologies,

Meant to send to comp. dcom.sys.cisco.

Reposted there.


news:...
Quoted text here. Click to load it




Site Timeline