Destination NAT with PIX

[schimekh]

Hi !

any ideas whether destination-nat is possible with a Cisco PIX ?

What I want to achieve is:

When the FW sees a packet, destined to a special IP, it will translate this packet - every other packet will remain "untouched".

Thx

Hans

[tomborst]

You should be able to use NAT-0 with an access-list..

For example.

nat (inside) 0 access-list no-nat

nat (inside) 1 192.168.1.0 255.255.255.0 0 0

global (outside) 1 interface

access-list no-nat deny ip any host 192.168.1.1 (will be translated)

access-list no-nat permit ip any any (will NOT be translated).