04-28-2005 09:57 PM - edited 02-21-2020 12:06 AM
I am using NAT on PIX for Internet browsing. I have l3 shitch to devide internal network in 10 subnets. Users direct connected to PIX are able to brows Internet, while, users conencted though L3 shitch is not able to borws the Internet. Pl give the the solution.
Solved! Go to Solution.
04-28-2005 11:44 PM
Only 3 ip addresses are assigned for hosts to access the internet, per this existing configuration:
global (outside) 1 x.x.x.245-x.x.x.247 netmask 255.255.255.240
To allow all internal hosts to access the internet using a single ip address, configure PAT as follows:
global (outside) 1 x.x.x.248 netmask 255.255.255.240
(you can use any public ip addres available, I just picked x.x.x.248)
Of course the hosts/servers configured with static statements are not affected.
The switch configuration is missing in the attachment. Just verify that there is a default route statement configured on the switch:
ip route 0.0.0.0 0.0.0.0 172.16.16.2
Please let us know if that helped.
Mustafa
p.s. please remember to mask or remove public ip addresses and sensitive info when posting configs.
04-28-2005 10:23 PM
Hello,
It would be helpful if you could post the pix configuration.
But anyway, some things to look for:
1. Is the pix nat'ing all subnets?
2. Does the pix have a route configured to every subnet?
3. Does the L3 have a "default route" pointing to the pix's inside interface?
04-28-2005 10:41 PM
04-28-2005 11:44 PM
Only 3 ip addresses are assigned for hosts to access the internet, per this existing configuration:
global (outside) 1 x.x.x.245-x.x.x.247 netmask 255.255.255.240
To allow all internal hosts to access the internet using a single ip address, configure PAT as follows:
global (outside) 1 x.x.x.248 netmask 255.255.255.240
(you can use any public ip addres available, I just picked x.x.x.248)
Of course the hosts/servers configured with static statements are not affected.
The switch configuration is missing in the attachment. Just verify that there is a default route statement configured on the switch:
ip route 0.0.0.0 0.0.0.0 172.16.16.2
Please let us know if that helped.
Mustafa
p.s. please remember to mask or remove public ip addresses and sensitive info when posting configs.
04-29-2005 03:16 AM
Thankx Mr. Mustafa
Now it is working.
regards
Imran Ghani
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide