Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

NAT for outside/inside global address

Hi,

How do i specify port range for global inside or outside address?

amdcent

  • Other Security Subjects
4 REPLIES
New Member

Re: NAT for outside/inside global address

specify for what use? open port for incoming traffic? blocking ports? Global command is for NAT in a global sense. are you sure you are not looking at a static ip and port mapping?

New Member

Re: NAT for outside/inside global address

What you will need to do to configure your NAT pull is the following:

global (outside) 1 192.168.101-192.168.0.254

global (outside) 1 192.168.100

The first is your range for regular users. the second ip address is in case you run out of the first and users will use PAT with it.

That is the configuration just insert your external ip address range that you would like to use instead of the 192.168

New Member

Re: NAT for outside/inside global address

are you sure he was asking for the IP range? He specified the port range. there is port range command on global, may be he means something else.

New Member

Re: NAT for outside/inside global address

I read it as IP range...its basically the same way, i wouldn't recommend setting a port range i'd say give the PIX the ip address and let it pick the ports that way you have less of a chance of overlapping a port in use by something else.

303
Views
0
Helpful
4
Replies