PAT/NAT Issue with Cisco PIX 515E

Unanswered Question

Hi there,

I have a PIX that is running 8.0.4 (is this the latest version as I can't find this anywhere on the Cisco website?) and have a problem with a PAT rule and hope someone can help.

I  have two external IPs that map to one internal IP and need to have different PAT rules in place.

These are the rules in question

static (inside,outside) tcp 8080 8080 netmask 
static (inside,outside) tcp range 10000 63535 range 10000 63535

The top rule works fine and any traffic coming from the internet works fine.  The lower rule is to NAT the external IP over a VPN link and it needs to do this for the high range of ports.  The command I have listed does not work but as you can see I want it to PAT everything over port 10000.

If anyone has any help they can offer with the problem that would be great.



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Kureli Sankar Wed, 11/25/2009 - 05:54
User Badges:
  • Cisco Employee,

Are you sure this server when sourcing traffic will always source traffic between these ports 10000 63535?

I'd collect captures and make sure.

Most of the times, static pat is implemented for inbound flows.  You seem to be using this for outbound (high to low).

How about if you did

nat (inside) 5

global (outside) 5


This Discussion