topic Re: NATing Question in Network Security

NATing Question

skhirbash — Mon, 11 Mar 2019 17:02:07 GMT

I created a one-to-one NAT statement but when I try to ping the public ip address from the outside, it won't responde. Here is the NAT statement. Any assistance would be greatly apprecaited.

nat(inside) 0 access-list nonat

nat(inside) 1 0.0.0.0 0.0.0.0.0

static (inside,outside) 12.200.199.120 172.17.100.101 netmask 255.255.255.255
static (inside,outside) 12.200.199.121 172.17.100.102 netmask 255.255.255.255

static (inside,outside) 12.200.199.122 172.17.100.103 netmask 255.255.255.255

access-group outside_access_in in interface outside

Thanks,

Re: NATing Question

Ganesh Hariharan — Wed, 27 Jan 2010 08:57:58 GMT

I created a one-to-one NAT
statement but when I try to ping the public ip address from the
outside, it won't responde. Here is the NAT statement. Any assistance
would be greatly apprecaited.
nat(inside) 0 access-list nonat
nat(inside) 1 0.0.0.0 0.0.0.0.0
static (inside,outside) 12.200.199.120 172.17.100.101 netmask 255.255.255.255
static (inside,outside) 12.200.199.121 172.17.100.102 netmask 255.255.255.255
static (inside,outside) 12.200.199.122 172.17.100.103 netmask 255.255.255.255
access-group outside_access_in in interface outside
Thanks,
sK

Hi Sk,

Check out the below link on nat configuuration on PIX firewall hope to help

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00800b6e1a.shtml

Ganesh.H

Re: NATing Question

Kureli Sankar — Wed, 27 Jan 2010 14:25:01 GMT

What is in the nonat acl?

Could you pls. paste the contents?

-KS

Re: NATing Question

vilaxmi — Thu, 28 Jan 2010 15:57:41 GMT

Hello,

Remeber NAT EXEMPT (nonat) takes higher precedence over static NAT and also nonat with ACL (on HIgher security-level ifc)

is bidirectional.

Keeping that in mind, go ahead and check your nonat access-lists, an if they happen to include the interesting tarffic, then your public IPs WILL NOT repond. Remove inetresting traffic from nonat ACL, and then your static NAT will take preference, allowing access for users from outside to the servers on inside.

HTH

Vijaya