pix to router

zulqurnain · ‎04-29-2007

hello,

can anyone tell me what would be the opposite command in pix FW if i want to do the same in router

pix command

static (outside,inside) 172.20.6.2 172.32.5.7 netmask 255.255.255.255 0 0

static (inside,outside) 60.10.72.136 172.16.23.1 netmask 255.255.255.255 0 0

mahmoodmkl · ‎04-29-2007

Hi

First u r statement in pix is wrong.

it should be.

static (inside,outside) (gobal ip) (local ip) netmask

The second statement is ok.

what exactly u r trying to accomplish.if u want the inside host to use the same ip address while going outside then u can use the below syntax.orelse give us more details.

ip nat inside source static 172.120.6.2 172.32.5.7

Thanks

Mahmood

zulqurnain · ‎04-29-2007

hello mahmood.

all i want to do is this..

i want to nat the source address of the packet coming into the router

then i want to creat a one-to-one mapping with the new source natted ip address.

e.g.

source 1.1.1.1 = 2.2.2.2

when the destination will reply back to the packet 2.2.2.2 should again nat back to 1.1.1.1

hope its clear enough.

rais · ‎04-29-2007

Opposite will be the command preceded with a 'no'.

If you looking for a router command use:

ip nat outside source static 172.32.5.7 172.20.6.2

ip nat inside source static 172.16.23.1 60.10.72.136

Thanks.