PDM does not support Policy nat

lowfell · ‎11-14-2007

I have had to build a vpn on a pix 6.34 using policy nat, however this has now made the pdm pratically unusable, is there a way to do this without disabling the pdm?

ivillegas · ‎11-20-2007

Yes it is possible to configure NAT with PDM. Make sure the static NAT configuration is right.

http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/s.html#wp1026694. For example static (DMZ, inside) x.x.x.x x.x.x.x netmask 255.255.255.255 0 0 . Format should always be Static(DMZ, *) if x.x.x.x is on DMZ.

jwalker · ‎11-20-2007

I do not think that PNAT is supported in v6.X. You might try upgrading to 7.X. ASDM might support this functionality; however, you are still better off doing it via the CLI.