PIX 515 NAT config from outside to inside

[mahesh18]

Hi Everyone,

I need to config ACL for traffic flow from outside to inside in PIX515.

Need help on NAT config for this?

Regards

MAhesh

[Dinesh Moudgil]

Here is a doc for your reference:-

http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/12496-28.html#topic12

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.

[Aditya Ganjoo · Accepted solution]

Hi Mahesh,

You need to more specific with the requirements.

Here is an example:

static (inside,outside) MAPPED IP REAL IP netmask 255.255.255.255

Regards,

Aditya

Please rate helpful posts.

[mahesh18]

Say if source from outside is 10.40.x.x and inside is 174.24.x.x

what config should i put then?

Regards

MAhesh

[Aditya Ganjoo]

Hi Mahesh,

Here is the command you would use:

static (inside,outside) <mapped IP> <174.24.x.x>

Source from outside can be anything but you need to specify the IP the user would access from outside.

Also on the outside ACL you need to allow source as any and destination would be the MAPPED IP.

Regards,

Aditya

Please rate helpful posts.

[mahesh18]

what IP should i put under mapped ip?

[Aditya Ganjoo]

Hi Mahesh,

The IP you would use to access the inside server from outside.

So lets say I have a server on the inside 10.1.1.1 and I want it to access it from outside using a public IP 1.1.1.1.

So my nat would be:

static (inside,outside) 1.1.1.1 10.1.1.1 

Remember I can come from any IP from outside.

Regards,

Aditya

[mahesh18]

if i use this command

static (inside,outside) 174.24.x.x  <174.24.x.x> netmask 255.255.255.255 

this will do no nat right?

[Aditya Ganjoo · Accepted solution]

Yes this is called a STATIC Identity NAT.

So you would access the internal IP from outside as the original IP.

Yes this would would work.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[mahesh18]

Many thanks !

Regards

Mahesh