topic Re: PIX NAT/PAT problem in Network Security

PIX NAT/PAT problem

s.vidanovic — Fri, 21 Feb 2020 05:55:32 GMT

I have configured NAT (range) on PIX, and everything was OK. Sudendly, my inside clients could not go outside. I have no restriction for inside users going outside. If I use PAT, still does not work. If I use PAT with PIX outside interface, everything is OK. Any ideas? I tried to connect one laptop between PIX and ISP router with one IP adrress from NAT range, no problem. In syslog I see that PIX biult translation, built outgoing connection, but no return traffic. I say again, this happened sudendly.

Sasa

Re: PIX NAT/PAT problem

rrbleeker — Tue, 04 Dec 2001 16:00:33 GMT

Based on your information it is hard to pinpoint the cause of the problem. I would concentrate on the communication between the PIX and the upstream router. Check the MAC addresses for your NAT/PAT pool first.

Re: PIX NAT/PAT problem

turnbull — Thu, 06 Dec 2001 13:20:02 GMT

Check the netmask in the global matches the outside interface.

Or, if the global needs to use a different netmask, ensure upstream router has appropriate route back for a non connected subnet.

Globals default to classful.