7.2.2 and static nat entry

danielkaiser — Mon, 11 Mar 2019 09:21:06 GMT

I hope someone can help.

With the static entry the host (10.0.0.5) can't get out to the internet, without the static entry the host can get out to the internet. Any ideas why this would be happining. I'm running version 7.2.2 on a pix 515. Thanks.

nat-control

global (outside) 1 70.x.x.100-70.x.x.104 netmask 255.255.255.240

global (dmz) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0

static (inside,outside) 70.x.x.105 10.0.0.105 netmask 255.255.255.255

Re: 7.2.2 and static nat entry

Aaron S Mcquaid — Fri, 19 Jan 2007 00:00:24 GMT

What may be going on here is that the .105 address is falling within the 70.x.x.96/28 range. Try using a global address that falls outside this range for your static or use a /29 on the global and make sure that the ranges don't overlap.

topic 7.2.2 and static nat entry in Network Security

7.2.2 and static nat entry

Re: 7.2.2 and static nat entry