Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

PIX 506 and Static Map

Is there a way of limiting how many NAT traslation I could statically map to? If yes how do I disable it.

I'm trying to troubleshoot a client PIX. It have been configured by somebody before and he gave-up troubleshooting what he configured.

My problem is that the client wants that his 2 servers be accessed from the internet.

The first server is working ok (since start) but the additional one wont. The static entries are below. I'll replace the public IP with 192.168.1.x network.

static (inside) 192.168.1.77 172.16.0.5 netmask 255.255.255.0

static (inside) 192.168.1.76 172.16.0.4 netmask 255.255.255.0

The first one was the original and the second one is the last that I add. The problem is only the 192.168.1.77 can be access or can go out of internet. but the new ip wont. I tried using other but it won't work also. It ONLY WORKS when it is map to 192.168.1.77 IP. all other ip are not working. other entries are below

ip address outside 192.168.1.74 255.255.255.248

ip address inside 172.16.0.1 255.255.0.0

global (outside) 1 192.168.1.78 netmask 255.255.255.248

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside,outside) 192.168.1.77 172.16.0.4 netmask 255.255.255.255 0 0

conduit permit icmp any any

static (inside,outside) 192.168.1.76 172.16.0.5 netmask 255.255.255.255 0 0

conduit permit tcp any any

route outside 0.0.0.0 0.0.0.0 192.168.1.73 1

1 REPLY
New Member

Re: PIX 506 and Static Map

Try clearing the ARP table (or rebooting) on the outside router after making your changes.

160
Views
0
Helpful
1
Replies
CreatePlease login to create content