PIX 510

kanthawar · ‎01-02-2003

I have a PIX 510 Firewall Ver 4.6...OS 11.X...Does it support overload...If not how do i NAT 80 Internal Address to 8 External IP Address????......

p-hogan · ‎01-03-2003

try this!

assign an ip address to the outside interface

ip address outside x.x.x.1 255.255.255.0

allow inside users to be translated

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

assign a separate ip address for outside translations

global (outside) 1 x.x.x.2 netmask 255.255.255.255

you could use all 7 spare addresses but it is not worth it.

version 6.3 (i think) allows you to use the same ip for both

i.e.

global (outside) 1 interface outside

kanthawar · ‎01-03-2003

can i download 5.x or 6.x from CISCO site for no cost...cause I was told that it would cost us $1500 for the current software...I know you can download the latest version.....Does it support NAT Overload...

thanx..

p-hogan · ‎01-03-2003

the software is not open to the public, logon required with s/ware access

possibly can get around it by buying a low level smartnet support which has software upgrades included

i would have thought that your current version supports NAT overload

the 'global outside 1' command with a single address should set NAT overload (when you enter it, it should say that it will overload to the named address)

the advantages of a later version (6 plus) is that you only need one IP address for the interface and the NAT overload address (with ver4/5 I think you have to specify different addresses still)