How can I Nat multiple network addresses on a pix 515

[jteixido]

I understand how to nat on a Pix firewall, but lets say that a clients adds

another separate internet router and wants to nat a certain internal network

address to the new internet router via it's pix firewall which is already everything

natting to the first internet router?

[bdube]

You must understand that NAT & global command work together. "Global command" defines the public ip address(es) used to communicate with the external. The NAT command defines which internal hosts will use which specific external address(es) define with the global command. To bind Global & NAT, simply use a specific NAT_ID, let's say "2", and apply the number 2 to both command.

For example: you have the public IP address 148.156.24.32 where all inside hosts part of the network 10.1.2.0 to 10.1.2.255 will be NATted. In this case the command looks like:

global (outside) 2 148.156.24.32 255.255.255.255

nat (inside) 2 10.1.2.0 255.255.255.0

That's it

Benoit