topic Re: NAT issue on PIX 515 in Network Security

NAT issue on PIX 515

deanbramndt — Fri, 21 Feb 2020 09:04:47 GMT

hi guys, I have 2 interfaces on this PIX that are alive, an inside interface, and an outside interface

outside 200.200.200.10

inside 192.168.120.0

I can't seem to access anything outside.

Global shows:

global (outside) 1 200.200.200.10

Nat shows:

nat (inside) 1 192.168.120.0 255.255.255.224 0 0

Does anything look out of place here? the outside interface can ping external hosts

Thanks

Re: NAT issue on PIX 515

jmia — Mon, 31 Jul 2006 11:30:58 GMT

Try (as an example)....

ip address outside 200.200.200.10 255.255.255.248

ip address inside 192.168.120.1 255.255.255.0

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

Hope this helps and let me know if you need further help/info.

Please rate posts if it helps!

Re: NAT issue on PIX 515

mmorris11 — Mon, 31 Jul 2006 17:16:37 GMT

If inside 192.168.120.0 is used with a 26 bit mask it is an invalid address. Didn't the cli bark at you for entering this? Am I misunderstanding something?

Re: NAT issue on PIX 515

deanbramndt — Mon, 31 Jul 2006 21:36:12 GMT

Yeah I have had some luck, I can get out to the external internet now, but if I try and access 192.168.120.3 from a host on another network I get:

No translation group found for tcp src outside:172.29.48.245/3210 dst in

side:192.168.120.3/3389

I have added:

static (outside,inside) 192.168.120.0 192.168.120.0 netmask 255.255.255.0

But no luck! 🙂 Any ideas?

Re: NAT issue on PIX 515

deanbramndt — Mon, 31 Jul 2006 23:42:36 GMT

I t was a /28 and no, it didn't bark 🙂 I have changed it to a /24 but still no luck with it all. I notice that if I place a static (inside,outside) 192.168.120.0 192.168.120.0 netmask 255.255.255.0 I can access 192.168.120.3 from 172.29.48.245, but then when on that device, I cannot get out to anything external. If I remove that static, and then physically stand in front of the device, I can access the internet no problems, but cannot RDP to it from 172.29.48.245

That IP is on another network, also behind our core router, hope this makes sense?

Re: NAT issue on PIX 515

mmorris11 — Wed, 02 Aug 2006 14:07:32 GMT

can you ping 192.168.120.3 from your PIX?