Can anyone help me understand somethign I have read in Cisco Press PIX book.
It relates to the above. In brief the outside network is 172.26.26.0 /24 the inside network is 10.0.0.0 /24. The example allows hosts on the outside network to access the FTP server on the LAN at 10.0.2.2 which sites behind another router on the inside of the PIX.
The book states that Dynamic outside translations simplify the routing on the network below i.e router on 10.0.2.0 wouldn't need route to 172.26.26.0 because of NAT - which I can understand.
So:
outside router --------PIX----------Inside Router-------------Inside Router-------------------FTP server
172.26.26.0 10.0.0.0 10.0.1.0
10.0.2.0 10.0.2.2
commands are:
nat (outside) 1 172.26.26.0 255.255.255.0 outside global (inside) 1 10.0.0.20-10.0.0.254 netmask 255.255.255.0 static (inside, outside) 10.0.2.2 10.0.2.2 access-list ACLIN permit tcp 172.26.26.0 255.255.255.0 host 10.0.2.2 eq ftp access-group ACLIN in interface outside
I built this in a lab earlier and know that it works but I don't understand why I need the static (inside, outside) 10.0.2.2 10.0.2.2 translation.
Regards
Darren