topic Re: Destination based Natting in PIX 515 in Network Security https://community.cisco.com/t5/network-security/destination-based-natting-in-pix-515/m-p/1306807#M858786 <HTML><HEAD></HEAD><BODY><P>If I specify classful network in static statement then what will be destination IP after translation? You mean to say for packets having source as 1.1.1.x and destination as 192.168.10.2, destination will be rewrite to 10.10.10.x after translation where x will be the same integer in both source and destinatin? </P></BODY></HTML> Thu, 09 Jul 2009 13:14:04 GMT yagnesh_tel 2009-07-09T13:14:04Z Destination based Natting in PIX 515 https://community.cisco.com/t5/network-security/destination-based-natting-in-pix-515/m-p/1306803#M858777 <P>I have situation where I need to do natting based on destination addresses in PIX 515. I know this is quite easy in routers but never did on PIX so I want to know is this possible? If it is then what is the command for this?</P> Mon, 11 Mar 2019 15:53:03 GMT https://community.cisco.com/t5/network-security/destination-based-natting-in-pix-515/m-p/1306803#M858777 yagnesh_tel 2019-03-11T15:53:03Z Re: Destination based Natting in PIX 515 https://community.cisco.com/t5/network-security/destination-based-natting-in-pix-515/m-p/1306804#M858780 <HTML><HEAD></HEAD><BODY><P>Could you give an example with IP addresses of what exactly you are trying to do ? </P><P></P><P>Jon</P></BODY></HTML> Wed, 08 Jul 2009 20:16:27 GMT https://community.cisco.com/t5/network-security/destination-based-natting-in-pix-515/m-p/1306804#M858780 Jon Marshall 2009-07-08T20:16:27Z Re: Destination based Natting in PIX 515 https://community.cisco.com/t5/network-security/destination-based-natting-in-pix-515/m-p/1306805#M858782 <HTML><HEAD></HEAD><BODY><P>suppose packet from hosts(1.1.1.X) comes into PIX's inside interface for destination 192.168.10.2, this destination address should be rewrite to 10.10.10.1 while packet traverse outside interface of the PIX. </P></BODY></HTML> Wed, 08 Jul 2009 23:55:28 GMT https://community.cisco.com/t5/network-security/destination-based-natting-in-pix-515/m-p/1306805#M858782 yagnesh_tel 2009-07-08T23:55:28Z Re: Destination based Natting in PIX 515 https://community.cisco.com/t5/network-security/destination-based-natting-in-pix-515/m-p/1306806#M858784 <HTML><HEAD></HEAD><BODY><P>Use policy NAT</P><P></P><P>access-list policy_NAT ext permit ip 1.1.1.0 255.255.255.0 host 192.168.10.2</P><P></P><P>static (inside,outside) 10.10.10.0 access-list policy_NAT</P><P></P><P>Keep in mind that you cannot policy NAT multiple inside hosts to a single IP. You'll need to specify a classful network in the static statment. </P></BODY></HTML> Thu, 09 Jul 2009 00:12:52 GMT https://community.cisco.com/t5/network-security/destination-based-natting-in-pix-515/m-p/1306806#M858784 Patrick0711 2009-07-09T00:12:52Z Re: Destination based Natting in PIX 515 https://community.cisco.com/t5/network-security/destination-based-natting-in-pix-515/m-p/1306807#M858786 <HTML><HEAD></HEAD><BODY><P>If I specify classful network in static statement then what will be destination IP after translation? You mean to say for packets having source as 1.1.1.x and destination as 192.168.10.2, destination will be rewrite to 10.10.10.x after translation where x will be the same integer in both source and destinatin? </P></BODY></HTML> Thu, 09 Jul 2009 13:14:04 GMT https://community.cisco.com/t5/network-security/destination-based-natting-in-pix-515/m-p/1306807#M858786 yagnesh_tel 2009-07-09T13:14:04Z