PIX - static, port redirection and Identity NAT

a.manosca — Fri, 21 Feb 2020 07:17:19 GMT

PIX version 6.2

In a separate post, I was able to get a confirmation that the following PIX configuration will work:

static(inside,outside) tcp 172.18.124.10 <AAAA> 10.1.1.10 <BBBB> netmask 255.255.255.255 0 0

static(inside,outside) tcp 172.18.124.10 <CCCC> 10.1.1.10 <CCCC> netmask 255.255.255.255 0 0

static(inside,outside) tcp 172.18.124.11 <AAAA> 10.1.1.11 <BBBB> netmask 255.255.255.255 0 0

static(inside,outside) tcp 172.18.124.11 <CCCC> 10.1.1.11 <CCCC> netmask 255.255.255.255 0 0

I don't have a PIX with me right now so I would greatly appreciate it if somebody could

confirm that the following config will be accepted by the PIX:

static(inside,outside) tcp 10.1.1.10 <AAAA> 10.1.1.10 <BBBB> netmask 255.255.255.255 0 0

static(inside,outside) tcp 10.1.1.10 <CCCC> 10.1.1.10 <CCCC> netmask 255.255.255.255 0 0

static(inside,outside) tcp 10.1.1.11 <AAAA> 10.1.1.11 <BBBB> netmask 255.255.255.255 0 0

static(inside,outside) tcp 10.1.1.11 <CCCC> 10.1.1.11 <CCCC> netmask 255.255.255.255 0 0

I found separate PIX sample configurations for Port Redirection and Identity NAT but not for both.

[Identity NAT]

[Port Redirection]

Thanks in advance for any help.

Ariel

Re: PIX - static, port redirection and Identity NAT

nkhawaja — Mon, 15 Mar 2004 00:21:04 GMT

This should work. Don't confuse with identity NAT here, this is port redirection mainly.

Thanks

Nadeem