traffic between hosts behind pix

[p.dubicki]

hi

I have a real problem to solve, is it possible and how, to allow traffic between hosts behind pix firewall ? what's the problem ?

1. there are two hosts behind pix - 10.0.0.10 and 10.0.0.11

2. on the pix is static done (inside,outside) ....

static (inside,outside) 190.0.0.10 10.0.0.10

and 190.0.0.11 10.0.0.11

3. I have to make possible traffic from 10.0.0.10 to public IP of 10.0.0.11 (that means 190.0.0.11) and back from 10.0.0.11 to public 10.0.0.10 (190.0.0.10)

how to do it ??? is it possible on pix ?? because on Nokia it is ....

regards P. Dubicki

[mostiguy]

Why not just configure each host with a local hosts file entry for the other machine, and access them by the private ip? A PIX does not allow traffic to leave from the same interface it came in on - so you will not be able to have traffic go from .10 to the pix, have it nat'd and un nat'd, and return to .11