PIX 7.2 static translation

[kelvindam]

hi all,

Having a setup with a PIX runnin 7.2.1 where I need to do a full net-net static (ie. static (int, int) 192.168.0.0 <-> 192.168.0.0 ).

Thus "exposing" the inside net, 192.168.0.0 to the outside.

Now, in order for this to work without breaking the nat translations from the inside out, when surfing the web, I imagine that I have to do a policy-based static of some sort.

Or am I better of using Outside NAT ?

setup:

Inside(192.168.0.0) -> [PIX] -> outside(pub-IP)

Kind regards

[rico_hao40]

Not very sure what's your need, if you want just "exposing" the inside net to outside, like "transparent", you can try nat (inside) o

#access-list NONAT permit ip any any

#nat (inside) 0 access-list NONAT

You also need add proper rules at inside and outside interface.