NAT issue on PIX 515

[deanbramndt]

hi guys, I have 2 interfaces on this PIX that are alive, an inside interface, and an outside interface

outside 200.200.200.10

inside 192.168.120.0

I can't seem to access anything outside.

Global shows:

global (outside) 1 200.200.200.10

Nat shows:

nat (inside) 1 192.168.120.0 255.255.255.224 0 0

Does anything look out of place here? the outside interface can ping external hosts

Thanks

[jmia]

Try (as an example)....

ip address outside 200.200.200.10 255.255.255.248

ip address inside 192.168.120.1 255.255.255.0

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

Hope this helps and let me know if you need further help/info.

Please rate posts if it helps!

[deanbramndt]

Yeah I have had some luck, I can get out to the external internet now, but if I try and access 192.168.120.3 from a host on another network I get:

No translation group found for tcp src outside:172.29.48.245/3210 dst in

side:192.168.120.3/3389

I have added:

static (outside,inside) 192.168.120.0 192.168.120.0 netmask 255.255.255.0

But no luck! :) Any ideas?

[mmorris11]

If inside 192.168.120.0 is used with a 26 bit mask it is an invalid address. Didn't the cli bark at you for entering this? Am I misunderstanding something?

[deanbramndt]

I t was a /28 and no, it didn't bark :) I have changed it to a /24 but still no luck with it all. I notice that if I place a static (inside,outside) 192.168.120.0 192.168.120.0 netmask 255.255.255.0 I can access 192.168.120.3 from 172.29.48.245, but then when on that device, I cannot get out to anything external. If I remove that static, and then physically stand in front of the device, I can access the internet no problems, but cannot RDP to it from 172.29.48.245

That IP is on another network, also behind our core router, hope this makes sense?

[mmorris11]

can you ping 192.168.120.3 from your PIX?