Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

NAT on a PIX 515

We currently have a PIX 515 with 4 ports. One port connects to our Internet and the other to our internal network. We run a NAT pool on the outside interface to translate our inside addresses to the outside. We have a requirement to connect to a vendor on one of our other ports. They require us to NAT our internal addresses to a range they provide. I have tried a pool and PAT, but the PIX will not allow me to do this. Is it possible?

Thanks,

Jack

1 REPLY

Re: NAT on a PIX 515

Jack,

Yes you can setup another Global for that DMZ interface. This can use the same NAT statement for your inside interface. Here is a sample configuration.

Example

Outside IP - 172.16.1.62

Vendor IP Range - 10.1.1.0-10.1.1.25

global (outside) 1 172.16.1.62 netmask 255.255.255.192

global (vendor) 1 10.1.1.0-10.1.1.25 netmask 255.255.255.0

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

Please rate any helpful posts

Thanks

Fred

98
Views
0
Helpful
1
Replies
CreatePlease to create content