Hi everybody..
I need help with this situation..
I've a PIX 520 with 3 interfaces being used...
nameif ethernet0 outside security0 nameif ethernet1 inside security100 nameif ethernet2 perimeter security50
I've assigned each interface the following IP's
ip address outside 201.224.63.2 255.255.255.0 ip address inside 192.168.1.1 255.255.255.0 ip address perimeter 192.168.2.1 255.255.255.0
and there the PIX is doing NAT...
global (outside) 1 216.72.222.5 netmask 255.255.255.0 global (outside) 1 216.72.222.8-216.72.222.162 netmask 255.255.255.0 global (perimeter) 1 192.168.2.10-192.168.2.200 netmask 255.255.255.0 nat (inside) 1 192.168.1.0 255.255.255.0 0 0 nat (perimeter) 1 192.168.2.0 255.255.255.0 0 0
I want to implement PAT for a certain group of IP's that must be on the inside network... Doing so, the global (outside) 216.72.222.5 is the IP i've selected for that... so i add this to the nat (inside) statement:
nat (inside) 1 192.168.3.0 netmask 255.255.255.0 0 0
so i could use a new pool for the inside network (because the
192.168.1.0 is fully used..)
- How can i let the 192.168.3.0 network go outside with the same gateway (192.168.1.1)?
- Is there another way to extend the internal block of IP address (192.168.1.0 is the one on the inside network an i want to extend it to the 192.168.3.0)
- If what I've done is right, what else i've to do to let the
192.168.3.0 inside network go out through the 192.168.1.1 gateway...