Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.

Pix 506E NAT issue!

Hi all,

I have the followig problem.

I have a pppoe conecction to my ISP ip address outside pppoe setroute

and I have a first IPSec Tunnel with this config

nat (inside) 0 access-list My_ACL

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

everithing work good, but I have configured a second tunnel and I am using NAT

static (inside,outside) 172.25.26.0 172.26.46.0 netmask 255.255.255.0 0 0

When I add this line I am not able to access Internet...

Any help please

ip address outside pppoe setroute

ip address inside 172.26.46.1 255.255.255.0

ip audit info action alarm

ip audit attack action alarm

pdm logging informational 100

pdm history enable

arp timeout 14400

global (outside) 1 interface

nat (inside) 0 access-list My_ACL

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside,outside) 172.25.26.0 172.26.46.0 netmask 255.255.255.0 0 0

Regards

2 REPLIES
Bronze

Re: Pix 506E NAT issue!

Add the network address 172.25.26.0 to your no NAT acl. You can also do a sniffer trace to check the route the packets are taking. Following links may help you

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009486e.shtml

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008045a2d2.shtml

Re: Pix 506E NAT issue!

Hi Leonardo

You are ignoring the following essential for internet access NAT&Global pair by entering the static

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

global (outside) 1 interface

Your traffic hits the static before hitting above pair

Why do you need that static?

static (inside,outside) 172.25.26.0 172.26.46.0 netmask 255.255.255.0 0 0

Tell us what you want to achieve and let us suggest you the correct way

Regards

106
Views
0
Helpful
2
Replies
CreatePlease to create content