cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
254
Views
0
Helpful
2
Replies

nat on vlans not directly connected to the inside interface

rpalacio
Level 1
Level 1

i have a pix 515e and a 6506 core switch which are having vlan 1 to 5. Vlan 1, where servers are, is the vlan attached to inside interface of the pix.

Is it possible to do a nat for the ip addesses not directly attached to the inside interface of the pix? (eg. vlan 2 to 5 of the core)?

thanks a lot.

2 Replies 2

mostiguy
Level 6
Level 6

Yup. The pix can nat anything so long as it has a route for it. I have a similar config to yours.

baileja
Level 1
Level 1

Absolutely can. Just define the NAT what global pool the specified interface (inside/vlans) will use or use PAT by using the outside interface. How is your config on your PIX, do you have 6.3 code with VLAN's or are VLANs configured only on the switch? If its only on the switch, with the new code you can define each VLAN as its own interface with its own security level as well. The term "NO Hairpining" is now a thing of the past!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: