I have an urgent PIX Change to do.
I have been asked to add a static translation to a PIX. I have a public range on the outside of the PIX which has been further subnetted to give me public addresses on the inside as well.
The public addresses on the outside have all been used with various static (inside,outside) translations for LAN hosts which are reachable via a next hop router on the inside Interface of the PIX.
The inside public address of the PIX also has a number of static translations, these have the affect of natting the inside public addresses to themsleves, so that it is unchanged on the outside of the Firewall.
I need to translate a new LAN host behind my inside router. As my Public addresses on the outside of the PIX are all used, can I use one of the Public addresses on the inside interface ?
I don't believe I can but any urgent clarification would be really appreciated.
Public Interface (Public Range - no more addresses left) | | PIX | | Inside Interface (Public Range Subnetted from Outside Range Above - 2/3 addresses left) | | Inside Router | | LAN Host I need to translate