Lotus Sametime, nonat and pix.

[danparsons]

Hi,

we need to setup a Lotus Sametime server on a site. With the following setup.

LAN ---- PIX 501 ---- RTR --- (INTERNET)

Now the issue is Lotus Sametime server cannot be NATted like the rest of the internal network.

Can I give it an IP of one of the spare external allocated by our ISP, and then run the identity nat exclusion static line on the pix so that IP is not NATted. Will this work, or do I need it on a dmz or will the 501 (6.3) even run it?

Many thanks for your wisdom.

Daniel.

[abinjola]

yes it will work

Suppose Lan Server IP-->1.1.1.1

Put default gateway on server as Pix inside Interface

add no nat rule

access-l abc permit ip host 1.1.1.1 any

nat (inside) 0 access-l abc

see if it works..