topic Re: PIX Static NAT issue in Network Security

PIX Static NAT issue

jwharrison — Fri, 21 Feb 2020 06:36:36 GMT

My inside network uses a NAT pool to go to the Internet. However I have an external site which will only allow access from a predefined address. How do I allow all users going to this one external address use the same (predefined) address and the nat pool for all other access ?

PIX 525

Re: PIX Static NAT issue

tohuang — Sun, 09 Mar 2003 22:19:08 GMT

Hi,

I think you can use global (outside) 1 interface and nat (inside) 1 0 0 command , so that all the internal users will be using outside interface ip address as PAT address to go out.

Another words, you have to tell the external site to allow the address coming from outside interface ip address of the pix.

Thanks

Tony Huang

Re: PIX Static NAT issue

shannong — Mon, 10 Mar 2003 13:32:46 GMT

You cannot control NAT based on destination addresses. You can, however, control NAT based on the inside source address using the example the other poster suggested by using an ACL with you [nat] statement.