Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

NAT with official IP on DMZ

Hello

I have a PIX 515E (Ver.6.3.1)with three interfaces. Now I d'like to activate the DMZ interface with a official IP-address range.

Between the internel and outside interface is a NAT (PAT) configuration active. No, I have problems to configure the NAT for the DMZ interface. With the official IP-adresses on the DMZ, it is not necessary to make NAT. I d'like to configure a simple routing between the internal to DMZ and between the ouside to DMZ.

How I is the NAT configuration for the a DMZ with official IP-adresse?

Regards

Pascal

1 REPLY
Hall of Fame Super Blue

Re: NAT with official IP on DMZ

Hi Pascal

As an example lets say your DMZ addressing is

212.73.45.0/28

on your pix firewall

static (DMZ,outside) 212.73.45.0 212.73.45.0 netmask 255.255.255.240

As long as the ISP routes these addresses to your pix external interface you should have no problem.

HTH

Jon

92
Views
4
Helpful
1
Replies