need help undertanding nat on pix

[dan_track]

Hi All

Currently I have x.x.x.64 255.255.255.240 being handled by dmz2 on my pix.

The pix has the following set:

nat (dmz2) 0 x.x.x.64 255.255.255.240 0 0

It also has:

static (dmz2,outside) x.x.x.76 x.x.x.76 255.255.255.255 0 0

My question is if the dmz is not doing NAT why is static being done to the same IP address.

Why input static statements?

what help do they give in this config?

If I took it out what consequence would there be?

Just to add somebody already configured this pix and I'm trying to remove irrelevant statements.

Appreciate any help with this.

Thanks in advance

Dan

[jbrunner007]

static to the same address = DO NOT DO NAT

(in this scenario nat from dmz2 to outside is being avoided).

If you want the other blanket nat statement to work; you need to use nat (dmz2) 1

nat (dmz2) 0 is to specify who should NOT get natted as well.

[dan_track]

Hi

Thanks for the reply.