Destination NAT

Unanswered Question
Dec 6th, 2007
User Badges:

Ive got some Client on the Inside Network which should connect to a Server on the Outside Network through a PIX 501. Now I want to translate the Destination Address fom the Inside to the Ouside. Anybody an idea how to do that? Thanks

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
acomiskey Thu, 12/06/2007 - 12:09
User Badges:
  • Green, 3000 points or more

x.x.x.x = translated ip

y.y.y.y = real ip


static (outside,inside) x.x.x.x y.y.y.y netmask 255.255.255.255

wostrobel Thu, 12/06/2007 - 12:14
User Badges:

Is this really changing the destination IP, or just the source IP. Are there multiple connection possible?

acomiskey Thu, 12/06/2007 - 12:20
User Badges:
  • Green, 3000 points or more

That would change the destination address, not the source. For example if the inside client requested 1.1.1.1 it would be translated to 2.2.2.2.


static (outside,inside) 1.1.1.1 2.2.2.2 netmask 255.255.255.255

wostrobel Thu, 12/06/2007 - 12:24
User Badges:

OK, thats what I have tried. Maybe there is an routing issue on the Outside network.

wostrobel Thu, 12/06/2007 - 12:59
User Badges:

Clients 10.42.2.25 to Server 192.168.249.25


The output says translating inside source to outside destination, and untranslating inside destination to outside destination!


850: ICMP echo-request: translating inside:10.144.4.1/1832 to outside:192.168.249.25/10

851: ICMP echo-request: untranslating inside:10.42.2.25 to outside:192.168.249.25

Actions

This Discussion