topic PIX 6.2 DNAT in Network Security

PIX 6.2 DNAT

ejaj — Fri, 21 Feb 2020 06:46:17 GMT

Hello

I am using pix 515 version 6.2. Going through 'static' command, I understood that, alias command is no more required to do DNATing, rather same can be done with word 'dns' in static command. So, I removed all alises and did this as following which didn't work. What is wrong.

static (custdmz,outside) 202.41.97.x 192.168.14.11 dns netmask 255.255.255.255 0 0

In version 5.2 I used aliases successfully. In ver 6.2, I am not using aliases command at all.

--ejaj

Re: PIX 6.2 DNAT

mhoda — Thu, 29 May 2003 13:29:48 GMT

Hi Ejaj,

pl. add one more line and execute "clear xlate" :

static (outside, custdmz) 202.41.97.x 192.168.14.11 dns

Thanks,

Mynul

Re: PIX 6.2 DNAT

chariley — Thu, 29 May 2003 17:56:50 GMT

How do you properly do this? Given:

alias (inside) 1.1.1.1 2.2.2.2 255.255.255.255

where 1.1.1.1 is the outside address

and 2.2.2.2 is the DMZ address

what is the equivilent static command?

static (inside, dmz) 2.2.2.2 1.1.1.1 dns

Do I need two entries, or will the one do?

Re: PIX 6.2 DNAT

mhoda — Fri, 30 May 2003 18:45:39 GMT

Hi,

Look like you want to do d-nat (not the dns doctoring), if thats the case, then the alias can be replaced by the following line:

static (dmz,inside) 1.1.1.1 2.2.2.2 outside

However, if you want to do the dns doctoring then this is what you need:

static (dmz, inside) 2.2.2.2 1.1.1.1 dns

Please make sure to execute the following if you want to do dns doctoring:

sysopt noproxyarp inside

Thanks,

Mynul

Re: PIX 6.2 DNAT

ejaj — Thu, 24 Jul 2003 03:31:55 GMT

Dear Hoda

Pl let me know If I am doing both d-nat and dns-doctoring on my pix, how to rewrite this.

--ejaj