Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Nat question

Hi all,

I have a pix 501/515. When a packet arrived into my pix, i must change its destination's address. If that possible with a nat/global command ?

if my packet is [source=192.168.3.1|dest=200.0.1.1] i'll obtain [source=192.168.3.1|dest=10.0.1.1].

Thanx you in advance

Kenshin

4 REPLIES
Cisco Employee

Re: Nat question

If this is inbound traffic (received on the outside interface), then this is just a simple static command:

> static (inside,outside) 200.0.1.1 10.0.1.1 netmask 255.255.255.255

If this is outbound traffic (received on the inside interface), then this is called Destination NAT and you just reverse the static:

> static (outside,inside) 200.0.1.1 10.0.1.1 netmask 255.255.255.255

The above says that traffic received on the inside interface destined for 200.0.1.1 will be changed to 10.0.1.1 and put on the outside interface.

Community Member

Re: Nat question

Thanx you very much. But it's necessary use static command to change that ? Can i use nat and global command to realise that ? Because i don't use static command :x

Kenshin

Cisco Employee

Re: Nat question

Destination NAT requires a static.

Community Member

Re: Nat question

Nice, thanx you for your answer.

Kenshin

104
Views
0
Helpful
4
Replies
CreatePlease to create content