Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

need help undertanding nat on pix

Hi All

Currently I have x.x.x.64 255.255.255.240 being handled by dmz2 on my pix.

The pix has the following set:

nat (dmz2) 0 x.x.x.64 255.255.255.240 0 0

It also has:

static (dmz2,outside) x.x.x.76 x.x.x.76 255.255.255.255 0 0

My question is if the dmz is not doing NAT why is static being done to the same IP address.

Why input static statements?

what help do they give in this config?

If I took it out what consequence would there be?

Just to add somebody already configured this pix and I'm trying to remove irrelevant statements.

Appreciate any help with this.

Thanks in advance

Dan

2 REPLIES
New Member

Re: need help undertanding nat on pix

static to the same address = DO NOT DO NAT

(in this scenario nat from dmz2 to outside is being avoided).

If you want the other blanket nat statement to work; you need to use nat (dmz2) 1

nat (dmz2) 0 is to specify who should NOT get natted as well.

New Member

Re: need help undertanding nat on pix

Hi

Thanks for the reply.

92
Views
4
Helpful
2
Replies
CreatePlease to create content