Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Static command on PIX

Hi Guys,

I am confused about the use of the static command on the PIX. Let says you have the following command on the pix:

static (inside,Smtp_DMZ) netmask

What does it mean

Does it mean anything from inside get translated to when going to DMZ or otherway around.

Please help me to understand the static command.


Hall of Fame Super Blue

Re: Static command on PIX


A static NAT is bi-directional so it actually means 2 things -

1) the device on the inside with an IP address of will be translated to if it sends packets to a device on the Smtp_DMZ

2) if a device on the Smtp_DMZ sends packets to then the destination IP address will be translated to and sent to the inside device

The static statement is a little confusing to be honest. The logical assumption would be that the IP addresses in the static statement are written in the same order as the interfaces ie.

static (inside,outside) "inside IP address" "outside IP adddress"

but in fact the IP addresses are written in reverse order ie.

static (inside,outside) "outside IP address" "inside IP address"

it's just one of those things you have to get to used to i'm afraid.