Cisco PIX 515: Map virtual ip to real one

Sep 01, 2006 2 Replies

Hello,



we have a PIX515 with two eth interfaces, inside on network



192.168.9.0/24 and outside on 10.10.24.0/24. We need users on inside to reach an internet proxy on outside with ip address 10.10.24.50, and would like that the users could point to a virtual ip on their network, such as 192.168.9.3. We should have something like the following

inside --> 192.168.9.3 -NAT to 10.10.24.50 --> outside



Could you please help?



Thanks, A.



static(inside, outside) 10.10.24.50 192.168.9.3 netmask 255.255.255.255

Cheers

--

formatting link

If I understand you correctly, you want people to be able to address 192.168.9.3 but have that end up going to 10.10.24.50.

If so, then the other poster's reply of

static (inside,outside) 10.10.24.50 192.168.9.3 netmask 255.255.255.255

will NOT work. That command would take incoming packets with a *destination* address of 10.10.24.50 and send them to internal destination 192.168.9.3, which isn't what you want.

What you need is PIX 6.1 or later, and

static (outside,inside) 192.168.9.3 10.10.24.50 netmask 255.255.255.255

This command would take outgoing packets with destination

192.168.9.3 and send them on to outside destination 10.10.24.50 .

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required