Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

PIX not NATing

I am trying to get my PIX to NAT addresses from a DMZ interface out the outside interface. If I use a block of addresses from the subnet of my outside interface it will not NAT them. Here is my pertinent config info:

ip address outside 10.1.116.2 255.255.255.0

global (outside) 1000 10.1.116.3-10.1.116.254

nat (VPN_DMZ) 1000 0.0.0.0 0.0.0.0 0 0

I am running version 6.2(2). Can anyone see the problem with this?

1 REPLY
New Member

Re: PIX not NATing

I dont see any problem, only and advice, specify an IP to do the PAT is a good option in this cases

try with

nat (VPN_DMZ) 1000 0 0

global (outside) 1000 10.1.1.116.3-10.1.116.253

global (outside) 1000 10.1.116.254

clear xlate

then try again, using show xlate to check the translates

to debug use logging on , then logg mon 7 and see if the pix is translating or are sending messages related to the translation.

82
Views
0
Helpful
1
Replies