Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Static command on PIX

Hi Guys,

I am confused about the use of the static command on the PIX. Let says you have the following command on the pix:

static (inside,Smtp_DMZ) 10.150.243.243 10.150.250.10 netmask 255.255.255.255

What does it mean

Does it mean anything from inside 10.150.250.10 get translated to 10.150.243.243 when going to DMZ or otherway around.

Please help me to understand the static command.

Tks

1 REPLY
Hall of Fame Super Blue

Re: Static command on PIX

Kuldeep

A static NAT is bi-directional so it actually means 2 things -

1) the device on the inside with an IP address of 10.150.250.10 will be translated to 10.50.243.243 if it sends packets to a device on the Smtp_DMZ

2) if a device on the Smtp_DMZ sends packets to 10.150.243.243 then the destination IP address will be translated to 10.150.250.10 and sent to the inside device

The static statement is a little confusing to be honest. The logical assumption would be that the IP addresses in the static statement are written in the same order as the interfaces ie.

static (inside,outside) "inside IP address" "outside IP adddress"

but in fact the IP addresses are written in reverse order ie.

static (inside,outside) "outside IP address" "inside IP address"

it's just one of those things you have to get to used to i'm afraid.

Jon

105
Views
4
Helpful
1
Replies