topic PIX not NATing in Network Security

PIX not NATing

collinss — Fri, 21 Feb 2020 06:08:26 GMT

I am trying to get my PIX to NAT addresses from a DMZ interface out the outside interface. If I use a block of addresses from the subnet of my outside interface it will not NAT them. Here is my pertinent config info:

ip address outside 10.1.116.2 255.255.255.0

global (outside) 1000 10.1.116.3-10.1.116.254

nat (VPN_DMZ) 1000 0.0.0.0 0.0.0.0 0 0

I am running version 6.2(2). Can anyone see the problem with this?

Re: PIX not NATing

alexis.fidalgo — Wed, 03 Jul 2002 19:00:45 GMT

I dont see any problem, only and advice, specify an IP to do the PAT is a good option in this cases

try with

nat (VPN_DMZ) 1000 0 0

global (outside) 1000 10.1.1.116.3-10.1.116.253

global (outside) 1000 10.1.116.254

clear xlate

then try again, using show xlate to check the translates

to debug use logging on , then logg mon 7 and see if the pix is translating or are sending messages related to the translation.