From the static syntax it shows:

(internal interface,external interface) (global IP) (local IP)

and yes 10.50.x.x is the global address I'm trying to translate to my internal address (144.45.184.x)

Brian

Give it a try, we have used this on many of out firewalls. You can use any combination of interfaces in any order in the static command eg.

static (inside,dmz)

static (outside,dmz)

static (dmz,outside)

etc...

Jon

Tried it and it spits out the following:

outside 0 has a lower security value than inside 100

and doesn't allow that static to be added..

Brian

Brian

Apologies but i made a wrong assumption. The ability to translate source address coming from the outside was introduced on pix v6.2(1). From the 6.2(1) release notes

=============================================

Bi-Directional Network Address Translation (NAT)

PIX Firewall software version 6.2 allows Network Address Translation (NAT) of external source IP addresses for packets traveling from the outside interface to an the inside interface. All functionality available with traditional NAT such as fixups, Stateful Failover, dynamic NAT, static NAT, and PAT are available bidirectionally in this release

=============================================

So it looks like your version won't support the commands i gave. Once again, apologies for that. We use 6.3 on our firewalls as well as v7.x.

Jon

Jon,

Would you suggest an update of the PIX to accommodate this?

Yeah, was going to do that, was just wondering if there was anything I can do without doing an upgrade first. Looks like their isn't....

Brian

Brian

No not sure there is unfortunately. Unless you have a device such as a router between your pix outside interface and the 10.50.x.x subnet.

Jon