06-24-2002 10:36 AM - edited 02-20-2020 10:06 PM
Hello, I'm am relativly new at PIX firewalls and have someone that needs a 501 configured for NAT. How can I do that, and how many IPs do I need? Is it the same as NAT for a router? Any response will be most appreciated.
06-24-2002 08:10 PM
The PIX 501 will come, by default, with a DHCP client enabled on the outside interface, a DHCP server enabled on the inside interface, and NAT configured using the outside DHCP address. You shouldn't need to do anything other than plug it in to the Internet connection, and plug your PC's into the back of it.
Having said that, the commands to do NAT on the PIX are the NAT and GLOBAL commands. The NAT command defines the traffic to be NAT'd, and the GLOBAL command defines the address to NAT it to.
For example,
nat (inside) 1 10.0.0.0 255.0.0.0
global (outside) 1 interface
will NAT any inside traffic from the 10.0.0.0/8 network to the IP address on the outside interface. The command reference is here:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_60/config/commands.htm
06-25-2002 12:01 AM
Few URLs for your reference
read this first
http://www.cisco.com/warp/public/707/28.html
PIX Top Issues
http://www.cisco.com/warp/public/110/top_issues/pix/pix_index.shtml
PIX Tech Tips
http://www.cisco.com/warp/public/707/index.shtml#pix
HTH
R/Yusuf
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide