PIX 506 and Static Map

riann — Fri, 21 Feb 2020 05:52:47 GMT

Is there a way of limiting how many NAT traslation I could statically map to? If yes how do I disable it.

I'm trying to troubleshoot a client PIX. It have been configured by somebody before and he gave-up troubleshooting what he configured.

My problem is that the client wants that his 2 servers be accessed from the internet.

The first server is working ok (since start) but the additional one wont. The static entries are below. I'll replace the public IP with 192.168.1.x network.

static (inside) 192.168.1.77 172.16.0.5 netmask 255.255.255.0

static (inside) 192.168.1.76 172.16.0.4 netmask 255.255.255.0

The first one was the original and the second one is the last that I add. The problem is only the 192.168.1.77 can be access or can go out of internet. but the new ip wont. I tried using other but it won't work also. It ONLY WORKS when it is map to 192.168.1.77 IP. all other ip are not working. other entries are below

ip address outside 192.168.1.74 255.255.255.248

ip address inside 172.16.0.1 255.255.0.0

global (outside) 1 192.168.1.78 netmask 255.255.255.248

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside,outside) 192.168.1.77 172.16.0.4 netmask 255.255.255.255 0 0

conduit permit icmp any any

static (inside,outside) 192.168.1.76 172.16.0.5 netmask 255.255.255.255 0 0

conduit permit tcp any any

route outside 0.0.0.0 0.0.0.0 192.168.1.73 1

Re: PIX 506 and Static Map

murabi — Thu, 25 Oct 2001 14:00:01 GMT

Try clearing the ARP table (or rebooting) on the outside router after making your changes.

topic Re: PIX 506 and Static Map in Network Security

PIX 506 and Static Map

Re: PIX 506 and Static Map