PDM 3.0 on PIX 515E with 6.3(4) and ALIAS command

[josky.jara]

I'm a newbie on this and I tried (without luck) to connect to the PDM after many attempts, I get the message that PDM found the ALIAS command in it cannot continue, the message recommend to use Outside NAT, but I don't know how replace fine...

the alias command is used like this:

alias (inside) 10.1.0.07 A.B.C.6 255.255.255.255

alias (inside) 10.1.0.08 A.B.C.7 255.255.255.255

alias (inside) 10.1.0.09 A.B.C.8 255.255.255.255

alias (inside) 10.1.0.10 A.B.C.9 255.255.255.255

where A.B.C.x are public IPs.

Could someone show me how translate this commands to use the NAT ouside?

thanks in advance

[Patrick Laidlaw]

Hello Josky,

This is how you would setup a static nat translation. If you'll notice that it says inside then outside and then flips the outside ip first with the inside second. This is not a typo but how the pix does it.

static (inside, outside) 7.7.7.7 10.1.0.7 netmask 255.255.255.255

static (inside, outside) 8.8.8.8 10.1.0.8 netmask 255.255.255.255

static (inside, outside) 9.9.9.9 10.1.0.9 netmask 255.255.255.255

static (inside, outside) 10.10.10.10 10.1.0.10 netmask 255.255.255.255

Once you have your nat in place you'll have to create an access-list and apply it to the outside interface to actually allow the traffic in.

If you need more help with this don't hesitate to ask.

Patrick

HTH please rate any posts that were helpful.

[josky.jara]

I was checking my configuration (the pix 515E was configured by another person) and I found the following:

alias (inside) 10.1.0.6 2.7.8.6 255.255.255.255

alias (inside) 10.1.0.7 2.7.8.7 255.255.255.255

alias (inside) 10.1.0.8 2.7.8.8 255.255.255.255

static (inside,outside) 2.7.8.6 10.1.0.6 netmask 255.255.255.255 0 0

static (inside,outside) 2.7.8.7 10.1.0.7 netmask 255.255.255.255 0 0

static (inside,outside) 2.7.8.8 10.1.0.8 netmask 255.255.255.255 0 0

access-group 101 in interface outside

the static commands are like you recommend me,

with this I have to do anything more (simply delete the all alias commands??)

thanks again!!

[Patrick Laidlaw]

Yep Just delete the Alias commands.

[josky.jara]

I'll try :)

thanks