cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
257
Views
0
Helpful
1
Replies

Pix 501 Dynamic NAT and Static NAT

glynncounty
Level 1
Level 1

I have a pix 501 with pix version 6.3(4)

I currently have static nat. I want to leave the static nat and add a dynamic nat for a block of say 30 addresses. I need the address to release if there is no activity for say an hour. Would appreciate any help or input on this issue.

1 Reply 1

Jon Marshall
Hall of Fame
Hall of Fame

nat (inside) 2 10.5.1.0 255.255.255.0

global (outside) 2 172.16.5.1-172.16.5.30

You can decrease the xlate timeout on the pix with

timeout xlate 1:00:00

default is 3 hours. Do "sh timeout" to see defaults.

Bear in mind that the timeout settings on pix v6.x are global so this will affect all xlates.

Jon

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: