PIX520

ishwar · ‎11-18-2003

Hi I have been using PIX520 firewall.

Here is the part of conf.file

ip address outside 202.52.251.145 255.255.255.0

ip address inside 192.168.10.75 255.255.255.0

ip address intf2 202.52.255.50 255.255.255.0

global (outside) 1 interface

global (intf2) 1 interface

nat (inside) 1 192.168.10.0 255.255.255.0

nat (intf2) 0 0.0.0.0 0.0.0.0 0 0

It is working fine.

Now I want to make some changes.

I have to interchange the inside network and intf2.

But it seems complicate.Can You Please suggest me how to configure PIX as our DNS,MAIL,AUTHENTICATION,WEB SERVER all resides in 202.52.255.0/24 network.

I tried to configure in this way.

ip address outside 202.52.251.145 255.255.255.0

ip address inside 202.52.255.50 255.255.255.0

ip address intf2 192.168.10.75 255.255.255.0

!

global (outside) 1 interface

nat (inside) 0 0.0.0.0 0.0.0.0 0 0

nat (intf2) 1 192.168.10.0 255.255.255.0

But I think This is not coplete ..I do not no what command I have to add so that I can use Internet from my private network 192.168.10.0/24.

Please help me.

Ishwar

nkhawaja · ‎11-18-2003

Hi,

I think for the part of config that you shared, your new config seems to be O.K. Is there any access-list applied on intf2 interface? If yes, then this may be what causing the trouble. Besides this, your NAT and Global are fine.

Thanks.