Static Commands on PIX

[jackko]

lanA<-->pixA<-->router<-->routerB<-->lanB

router<-->routerC<-->lanC

i was using static command on the pix.

static (inside,outside) lanB lanA netmask 255.255.255.0

static (inside,outside) lanC lanA netmask 255.255.255.0

i know that the above commands are invalid, please advise asap. thanks in advance.

[jmia]

Hi -

Please read the following document :

> http://www.cisco.com/warp/public/707/28.html

Hope this helps.

[jboyer]

The static statement must use addresses that are on the same subnet as the pix. LanA address should be ok, but lanb is on the other side of a router. Lanb should be an unused address on the same sub as the outside interface.

[jackko]

Thank you for your response.

The real question is that there are different networks/subnets need access to lanA. How should we configure the pixA?

Thanks in advance.

[l.mourits]

I understand that lanA is one your inside interface and lanB is on you outside interface. I assume you did not change the default security levels and you do not want to do any translations.

In that case the following configuration would be enough for users to start sessions both ways:

static (inside, outside)lanA lanA netmask 255.255.255.0

nat (inside) 0 lanA 255.255.255.0

nat (outside) 0 lanB 255.255.255.0

nat (outside) 0 lanC 255.255.255.0

Should be all :-)

Kind Regards,

Leo

static