Cannot NAT IP address used by Pix interface ?

mledoux · ‎12-12-2001

Hello,

Is it true that you cannot NAT the ip address used by an interface on the PIX like you can on a cisco router ? We can only get one IP address from our isp. Can we still use a pix and NAT with only one ip ? Thanks!

0r-lau · ‎12-12-2001

of course you can use it like a cisco router.

here's the link for the NAT and PAT command for the PIX.

http://www.cisco.com/warp/customer/110/19.html

Regards,

Ron

mledoux · ‎12-13-2001

Thanks for the reply, I had a pix a while back that I had configured to do NAT and as I remember it would not let me do NAT on an ip address assigned to an interface. Is this not the case as I remember it ?( it was a while back ). Sorry if the question wasn't clear, but that is specifically what I was asking about- if on the PIX you could use an ip address assigned to an interface for NAT also.

Thanks again !

m-raft · ‎12-13-2001

Just use "global (outside) 1 interface" if you want to use the IP address of the outside interface. You will need an associated "nat (inside) 1 0 0" command to nat all internal IPs. If you outside IP is 20.20.20.1 then anyone initiating a connection going from inside to outside would be natted to 20.20.20.1.

mledoux · ‎12-13-2001

thanks guys for the quick responses. That makes sense, will do !