NAT in PIX

Rupesh Kashyap · ‎04-01-2009

What is the meaning of this line in PIX--

static (inside,outside) 10.48.0.0 10.48.0.0 netmask 255.252.0.0

Giuseppe Larosa · ‎04-02-2009

Hello Rupesh,

this line should instruct the PIX to accept traffic from inside to outside from 10.48.0.0 255.252.0.0 and that these addresses are not natted but left unchanged (see that 1048.0.0 appears two times this means left it unchanged)

Hope to help

Giuseppe

Jon Marshall · ‎04-02-2009

Rupesh

In addition to Giuseppe's post it also allows connections to be initiated from outside to those addresses providing you have allowed the traffic in an acl.

Jon

lamav · ‎04-02-2009

And to add to what both of them said, the reason that you would do a NAT like this, where it doesnt seem to achieve anything, since the addresses dont change, is that the PIX firewall's Adaptive Security Algorithim is engineered to look for NAT translations between any 2 interfaces.

Victor