Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

pix firewall nat question

Hi,

I'm learning to configure cisco pix firewallas and found following global NAT pool example in cisco page:

global (outside) 1 200.100.100.110-200.100.100.150 netmask 255.255.255.0

I'm wondering why cisco in examples netmask field is included besides the address range. (it is obvious when it is included beside single IP, but with address range it is something nonsensical )

4 REPLIES
Silver

Re: pix firewall nat question

Its not a nonsensical because with the netmask you can define the range

regards

shivlu

Community Member

Re: pix firewall nat question

What range ?

Range is already difined in statement 200.100.100.110-200.100.100.150 (from 110 to 150)

Bronze

Re: pix firewall nat question

What if you DON'T want to NAT 200.100.100.115/22?

The NAT statement 200.100.100.110-200.100.100.150 netmask 255.255.255.0 will only NAT 200.100.100.110-150/24.

It won't NAT the same IP address with a different mask. Therefore it allows for greater control over the NAT.

Hope that helps.

Community Member

Re: pix firewall nat question

hi dude

cisco wants it's students to be very clear about what they are learning, and no specific reason for it.

any way my yahoo id is kittumcp@yahoo.com.

hope we discuss more issues

102
Views
0
Helpful
4
Replies
CreatePlease to create content