Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

520 4.4 PAT w/1 static address?

I am trying to implement a PIX 520 in a small environment. The ISP provides a DSL with a single static IP address.

1) Is there a way to do PAT using the same IP address for the outside interface and the address for the global statement (source IP address for outgoing packets)?

2) Is the global statement even necessary in this scenario?

eg.

ip address inside 192.168.0.1 255.255.255.0

ip address outside 12.55.55.55 255.255.224.0

nat 1 0

global (outside) 1 12.55.55.55 255.255.224.0

(the global statement produces an error that it overlaps the outside interface address)

Thanks in advance.

2 REPLIES
Gold

Re: 520 4.4 PAT w/1 static address?

nat (inside) 1 0.0.0.0 0.0.0.0

global (outside) 1 interface

the above nat statement would nat every hosts inside, u may want to modify that.

New Member

Re: 520 4.4 PAT w/1 static address?

Thanks, Jackko.

Problem is that the "interface" parameter doesn't seem to be valid on older OSs. I'm running 4.4.

My plan was to upgrade to 5.1 (as far as I can go without a new--expensive--flash card)) but I didn't see any OS below 5.2 on the PIX software center.

Does anyone know if the command:

global (outside) 1 interface

is supported in 5.1?

135
Views
5
Helpful
2
Replies