Global nat issue for PIX or ASA

Feb 17, 2011 1 Replies

Hi, Want to know if my case works or not:



We want to nat a public ip into web server inside the internal network: the outside interface of the PIX = 202.123.111.2, and inside interface of the pix = 192.168.10.1. Can we nat a public IP 202.222.222.2 to 172.12.2.3 with the following PIX configuration: PIX configuration: Global (outside) 1 202.123.111.3 netmask 255.255.255.255 0 0 Global (outside) 2 202.222.222.2 netmask 255.255.255.255.0 0 nat (inside) 1 192.168.10.10 255.255.255.255 0 0 nat (inside) 2 172.12.2.3 255.255.255.255 0 0



static (inside,outside) 202.222.222.2 172.12.2.3 .............



Any issue ?



THANKS


I am not a pix wizard and do not have one to hand either however your configuration looks very reasonable to me.

There is no expectation that the inside address should be directly connected to the pix. This is of course the case in many home or small business networks but is not the general case and any NATter will have to deal with that competently.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required