Cisco PIX... address transform...

Feb 16, 2006 3 Replies
T

All,



Wonder if someone can point me in the right direction...? I have a PIX 515E that I'm using as an internal firewall in a classic internet | firewall | dmz | firewall | internal LAN config.



the inside (internal lan) interface address is 10.156.1.1/24 and the outside (dmz) address is 10.1.1.254/24. There are several hosts within the DMZ (10.1.1.20, 10.1.1.21, 10.1.1.22 etc).



Now what I want to do is reference a DMZ host (say 10.1.1.20) using an inside network IP address (10.156.1.40 say) - so that an internally connected PC can ping the DMZ host using the 10.156.1.40 address.



I've issued the command "static (inside, outside) 10.156.1.40 10.1.1.20"



Then ACLed to allow "icmp any" to the DMZ host (10.156.1.40). However, its not working? Can anyone give me any pointers to what is wrong here?



Any help greatly appreciated!



Thanks



-D


Vote
Twitter Facebook LinkedIn
M

You have to do " static (outside,inside)" and not "static (inside,outside)"

since you want to mask an outside IP to the inside , and not mask an inside IP to the outside.

static (outside,inside) 10.156.1.40 10.1.1.20 netmask 255.255.255.255 0 0

Vote
Twitter Facebook LinkedIn
T

OK - done that..... still no joy.... pinging 10.156.1.40 doesn't work..... anything else that I'm missing?

Vote
Twitter Facebook LinkedIn
M

can you post your config

-nat - global - static - acl - and access-group

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required