cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1030
Views
0
Helpful
2
Replies

Configure NAT on Cisco PIX 501

mmatteson
Level 1
Level 1

Hello, I'm am relativly new at PIX firewalls and have someone that needs a 501 configured for NAT. How can I do that, and how many IPs do I need? Is it the same as NAT for a router? Any response will be most appreciated.

2 Replies 2

gfullage
Cisco Employee
Cisco Employee

The PIX 501 will come, by default, with a DHCP client enabled on the outside interface, a DHCP server enabled on the inside interface, and NAT configured using the outside DHCP address. You shouldn't need to do anything other than plug it in to the Internet connection, and plug your PC's into the back of it.

Having said that, the commands to do NAT on the PIX are the NAT and GLOBAL commands. The NAT command defines the traffic to be NAT'd, and the GLOBAL command defines the address to NAT it to.

For example,

nat (inside) 1 10.0.0.0 255.0.0.0

global (outside) 1 interface

will NAT any inside traffic from the 10.0.0.0/8 network to the IP address on the outside interface. The command reference is here:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_60/config/commands.htm

yusuff
Cisco Employee
Cisco Employee
Review Cisco Networking for a $25 gift card