Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Pix 501 Dynamic NAT and Static NAT

I have a pix 501 with pix version 6.3(4)

I currently have static nat. I want to leave the static nat and add a dynamic nat for a block of say 30 addresses. I need the address to release if there is no activity for say an hour. Would appreciate any help or input on this issue.

1 REPLY
Hall of Fame Super Blue

Re: Pix 501 Dynamic NAT and Static NAT

nat (inside) 2 10.5.1.0 255.255.255.0

global (outside) 2 172.16.5.1-172.16.5.30

You can decrease the xlate timeout on the pix with

timeout xlate 1:00:00

default is 3 hours. Do "sh timeout" to see defaults.

Bear in mind that the timeout settings on pix v6.x are global so this will affect all xlates.

Jon

119
Views
0
Helpful
1
Replies