I have a question on the static mapping. I know that static is a one to one mapping scenario. Can that mapping be for inside -----> outside as well as outside ----> inside.
So will the command be the same for both.
For example if the outside is 192.168.1.1 and the inside is 10.1.1.1.
will this command be fine for both sides
static (dmz,outside) 192.168.1.1 10.1.1.1 netmask 255.255.255.255
Also the other thing if i have a PC on the internet wanting to access the internal can i use the static accordingly..
Appreciate your help
What you are seeing is an idiosyncracy of the Pix. Even when you don't want to NAT you need a static statement. From your first example you are basically telling the pix that you are presenting the network 10.100.140.0/24 from the inside to the outside as 10.100.140.0/24. Without this statement traffic could not flow from the lower to higher security interface.