cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1674
Views
0
Helpful
1
Replies

PIX 506 and Static Map

riann
Level 1
Level 1

Is there a way of limiting how many NAT traslation I could statically map to? If yes how do I disable it.

I'm trying to troubleshoot a client PIX. It have been configured by somebody before and he gave-up troubleshooting what he configured.

My problem is that the client wants that his 2 servers be accessed from the internet.

The first server is working ok (since start) but the additional one wont. The static entries are below. I'll replace the public IP with 192.168.1.x network.

static (inside) 192.168.1.77 172.16.0.5 netmask 255.255.255.0

static (inside) 192.168.1.76 172.16.0.4 netmask 255.255.255.0

The first one was the original and the second one is the last that I add. The problem is only the 192.168.1.77 can be access or can go out of internet. but the new ip wont. I tried using other but it won't work also. It ONLY WORKS when it is map to 192.168.1.77 IP. all other ip are not working. other entries are below

ip address outside 192.168.1.74 255.255.255.248

ip address inside 172.16.0.1 255.255.0.0

global (outside) 1 192.168.1.78 netmask 255.255.255.248

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside,outside) 192.168.1.77 172.16.0.4 netmask 255.255.255.255 0 0

conduit permit icmp any any

static (inside,outside) 192.168.1.76 172.16.0.5 netmask 255.255.255.255 0 0

conduit permit tcp any any

route outside 0.0.0.0 0.0.0.0 192.168.1.73 1

1 Reply 1

murabi
Level 4
Level 4

Try clearing the ARP table (or rebooting) on the outside router after making your changes.

Review Cisco Networking products for a $25 gift card