router and firewall

[carl_townshend]

Hi all, If i have a dsl connection at home, with a cisco dsl router and pix 501 firewall, where do i do the natting and what routes need to be on where ?

[amit-singh]

Hi Carl,

Your DSL router will be having the public IP from your ISP on its DSL interface. So you have to NAT it on the ADSL interface. You will have a private IP on the router connecting to the outside interface of the PIX. So do a self static on the outside interface and use ACLs to allow or deny the traffic and NAT it on the router interface for the outgoing internet traffic.

HTH, Please rate if it does.

-amit singh

[amit-singh]

Hi Carl,

Your DSL router will be having the public IP from your ISP on its DSL interface. So you have to NAT it on the ADSL interface. You will have a private IP on the router connecting to the outside interface of the PIX. So do a self static on the outside interface and use ACLs to allow or deny the traffic and NAT it on the router interface for the outgoing internet traffic.

HTH, Please rate if it does.

-amit singh

[carl_townshend]

do you mean a nat overload ? can you give me an example config of these connected devices ?

[royalblues]

here is a sample config

ip nat inside source list 101 interface fastEthernet0/0 overload

access-list 101 permit ip 172.16.100.0 0.0.0.255 any

access-list 101 permit ip 172.16.200.0 0.0.0.255 any

interface fa 0/1

ip address 200.200.200.200 255.255.255.0

ip nat inside

interface fa 0/0

ip address 172.16.100.1 255.255.255.0

ip nat outside

ip route 0.0.0.0 0.0.0.0 fa 0/1

HTH, rate if it does

Narayan

[carl_townshend]

thanks