Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

Bronze

PIX - static, port redirection and Identity NAT

PIX version 6.2

In a separate post, I was able to get a confirmation that the following PIX configuration will work:

static(inside,outside) tcp 172.18.124.10 <AAAA> 10.1.1.10 <BBBB> netmask 255.255.255.255 0 0

static(inside,outside) tcp 172.18.124.10 <CCCC> 10.1.1.10 <CCCC> netmask 255.255.255.255 0 0

static(inside,outside) tcp 172.18.124.11 <AAAA> 10.1.1.11 <BBBB> netmask 255.255.255.255 0 0

static(inside,outside) tcp 172.18.124.11 <CCCC> 10.1.1.11 <CCCC> netmask 255.255.255.255 0 0

I don't have a PIX with me right now so I would greatly appreciate it if somebody could

confirm that the following config will be accepted by the PIX:

static(inside,outside) tcp 10.1.1.10 <AAAA> 10.1.1.10 <BBBB> netmask 255.255.255.255 0 0

static(inside,outside) tcp 10.1.1.10 <CCCC> 10.1.1.10 <CCCC> netmask 255.255.255.255 0 0

static(inside,outside) tcp 10.1.1.11 <AAAA> 10.1.1.11 <BBBB> netmask 255.255.255.255 0 0

static(inside,outside) tcp 10.1.1.11 <CCCC> 10.1.1.11 <CCCC> netmask 255.255.255.255 0 0

I found separate PIX sample configurations for Port Redirection and Identity NAT but not for both.

[Identity NAT]

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/s.htm#wp1026694

[Port Redirection]

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094aad.shtml#topic9

Thanks in advance for any help.

Ariel

1 REPLY
Cisco Employee

Re: PIX - static, port redirection and Identity NAT

This should work. Don't confuse with identity NAT here, this is port redirection mainly.

Thanks

Nadeem

401
Views
0
Helpful
1
Replies