Destination Address Translation w/Cisco Pix

[scott.dunn]

How can I do destination address translation on a Pix in the more secure to less secure direction?

[gfullage · Accepted solution]

Use the static command as follows:

static (outside,inside) 10.1.1.1 200.1.1.1 netmask 255.255.255.255

Note the interfaces are swapped around from a normal static command.

What this says is that if the PIX sees a packet on the inside interface destined for 10.1.1.1, send it out the outside int and change the destination to 200.1.1.1