Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Sanity Check - static translations

I need a sanity check to make sure I am doing this correctly. I have a PIX 515 with two networks. one network is translated to the outside interface (PAT). However, the hosts on the other network CANNOT be nat'ed. So I have static translations set up for those hosts on that network. So, based on what I learned in my PIX class, with static maps I have to do access lists for traffic to get to/from those hosts. so I have:

static (inside,outside) 1.1.1.1 1.1.1.1

access-list outside_in permit tcp any eq www host 1.1.1.1

access-group outside_in in interface outside

**all the hosts need to do is web traffic at this time

any help would be greatly appreciated, as I am slightly under the gun to get this fixed today - thanks!

1 REPLY
New Member

Re: Sanity Check - static translations

Try changing you acces list to

access-list outside_in permit tcp any host 1.1.1.1 eq www

99
Views
0
Helpful
1
Replies
CreatePlease to create content