topic Re: Global/Nat across mutliple PIX Interfaces in Network Security https://community.cisco.com/t5/network-security/global-nat-across-mutliple-pix-interfaces/m-p/436533#M535841 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>you are using a wrong ip address (5.6.7.8 255.255.255.248) on the partner interface. With this subnetmask you have 6 valid address that you can assign to host 5.6.7.9 up to 5.6.7.14.</P><P></P><P>5.6.7.8 specifies the network and 5.6.7.15 specifies the broadcast address and can not be assign to an interface.</P><P></P><P>So change 5.6.7.8 to an ip address in the range 5.6.7.9-5.6.7.14</P><P></P><P>Kind Regards,</P><P>Tom</P></BODY></HTML> Tue, 05 Jul 2005 21:13:53 GMT tvanginneken 2005-07-05T21:13:53Z Global/Nat across mutliple PIX Interfaces https://community.cisco.com/t5/network-security/global-nat-across-mutliple-pix-interfaces/m-p/436532#M535840 <P>I had the following config on my PIX 515 and everything was working (IP's have been changed)</P><P></P><P>ip address outside 1.2.3.4 255.255.255.224</P><P>ip address inside 192.168.150.2 255.255.255.0</P><P>ip address dmz 192.168.47.1 255.255.255.0</P><P>global (outside) 2 1.2.4.5 netmask 255.255.255.240</P><P>global (outside) 1 interface</P><P>global (dmz) 1 interface</P><P>global (dmz) 2 192.168.47.50 netmask 255.255.255.255</P><P>nat (inside) 0 access-list vpn</P><P>nat (inside) 2 192.168.1.0 255.255.0.0</P><P>nat (inside) 1 192.168.0.0 255.255.0.0</P><P></P><P>On my external router I used a route-map to send anything from nat 1 out a specific path and anything from nat 2 out a different path. Everything was working.</P><P></P><P>I had to install a new internet connection and created a new interface on the PIX. </P><P></P><P>ip address outside 1.2.3.4 255.255.255.224</P><P>ip address inside 192.168.150.2 255.255.255.0</P><P>ip address dmz 192.168.47.1 255.255.255.0</P><P>ip address partner 5.6.7.8 255.255.255.248</P><P>global (outside) 2 1.2.4.5 netmask 255.255.255.240</P><P>global (outside) 1 interface</P><P>global (dmz) 1 interface</P><P>global (dmz) 2 192.168.47.50 netmask 255.255.255.255</P><P>global (partner) 1 interface</P><P>nat (inside) 0 access-list vpn</P><P>nat (inside) 2 192.168.1.0 255.255.0.0</P><P>nat (inside) 1 192.168.0.0 255.255.0.0</P><P></P><P>Clients using nat (inside) 1 work fine but clients using nat (inside) 2 don't work. I've tried several combinations of</P><P>global (partner) 2 x.x.x.x netmask x.x.x.x but nothing has worked so far.</P><P></P><P>Thanks for any help you can provide.</P><P></P> Fri, 21 Feb 2020 08:15:09 GMT https://community.cisco.com/t5/network-security/global-nat-across-mutliple-pix-interfaces/m-p/436532#M535840 unionbancorpit 2020-02-21T08:15:09Z Re: Global/Nat across mutliple PIX Interfaces https://community.cisco.com/t5/network-security/global-nat-across-mutliple-pix-interfaces/m-p/436533#M535841 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>you are using a wrong ip address (5.6.7.8 255.255.255.248) on the partner interface. With this subnetmask you have 6 valid address that you can assign to host 5.6.7.9 up to 5.6.7.14.</P><P></P><P>5.6.7.8 specifies the network and 5.6.7.15 specifies the broadcast address and can not be assign to an interface.</P><P></P><P>So change 5.6.7.8 to an ip address in the range 5.6.7.9-5.6.7.14</P><P></P><P>Kind Regards,</P><P>Tom</P></BODY></HTML> Tue, 05 Jul 2005 21:13:53 GMT https://community.cisco.com/t5/network-security/global-nat-across-mutliple-pix-interfaces/m-p/436533#M535841 tvanginneken 2005-07-05T21:13:53Z