Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

PIX501 NATing

Hi All Expert,

Need help on the PIX501 NATing.

If I need to configure static NAT which source from outside traffic to inside LAN, I can used static command map the public IP to my internal IP, if I only need to map from port number 5500 to 5800, how can I do that?

Can I group a range of ports and assign to static command or how?

Please help.

Thank you.

Rgds,

Au Yeong Shaw Voel

7 REPLIES
Community Member

Re: PIX501 NATing

Hi All Expert,

Here I attach my configuration, how can I add the new configuration in it?

Do it affect my current configuration?

Rgds,

Au Yeong Shaw Voel

Re: PIX501 NATing

Hello,

To clarify this are you wanting to translate the public ip address port from 5500 to the private address 5800. The command to do this would be:

static (inside,outside) tcp x.x.x.x 5500.z.z.z.z 5800 netmask 255.255.255.255

This will efectivly redirect connections to x.x.x.x on port 5500 to the inside address z.z.z.z port 58000.

Patrick

Please rate any posts that are helpful.

Community Member

Re: PIX501 NATing

Hi Patrick,

Sorry to confuse you.

I want to map a range from port 5500 to port 5800 to my public IP which is NAT to my local IP. And the easire way to do this.

static (inside, outside) tcp x.x.x.x 5500 z.z.z.z 5500 netmask 255.255.255.255

.........................

.........................

static (inside, outside) tcp x.x.x.x 5800 z.z.z.z 5800 netmask 255.255.255.255

Do I need to add every single statement from port 5500 to 5800?

Thank you.

Rgds,

Au Yeong Shaw Voel

Re: PIX501 NATing

Hello,

I think you can define an access list with your static nat statement, which would look like thsi:

static (inside,outside) x.x.x.x access-list TCP_PORT_RANGE

!

access-list TCP_PORT_RANGE permit tcp host x.x.x.x host z.z.z.z range 5500 5800

Can you try this and see if it works for your purpose ?

Regards,

GNT

Community Member

Re: PIX501 NATing

Hi GNT,

I got an error massage when I execute static command,

ERROR: cannot translate from IP protocol tcp to IP protocol ip

Can help on this?

Thank you.

Rgds,

Au Yeong Shaw Voel

Re: PIX501 NATing

Hello Au,

I think you have to switch 'inside' and 'outside':

static (outside,inside) x.x.x.x access-list TCP_PORT_RANGE

!

access-list TCP_PORT_RANGE permit tcp any host x.x.x.x range 5500 5800

x.x.x.x would be the internal IP address.

Regards,

GNT

Community Member

Re: PIX501 NATing

Hi GNT,

Sorry, again still prompt the same error,

ERROR: cannot translate from IP protocol tcp to IP protocol ip

Could this be the access-list is tcp?

Rgds,

Au Yeong Shaw Voel

145
Views
0
Helpful
7
Replies
CreatePlease to create content