NATting out

Good time of day, ladies and gentlemen.

I'm trying too hard to have DMZ and inside network to access internet using PIX and PIX alone. Access inward - via "static" works just fine. But here I did both created a NAT group with the lone DMZ server, and a "global" with the interface option and nada.

Any immediate ideas ?

Reply to
Ann Tone
Loading thread data ...

number "101" shown below must match between the nat and global command. The example shown below assumes the "real server ip addresses on your DMZ are in the 192.168.190.0/24 network. "outside" interface is your public Internet facing Interface. If necessary, try logging to debugging level and search for messages such as "no translation group found" Also note that static nat commands are used for inbound as well as outbound connections. Therefore if you have a static nat for your lone DMZ server referencing the "outside" interface, this should also be used for this system's access to the internet, even when nat and global commands are also used for the same interfaces.

nat (DMZ) 101 192.168.190.0 255.255.255.0

global (outside) 101 interface

Reply to
jrguent

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.