PIX Static NAT issue

jwharrison · ‎03-09-2003

My inside network uses a NAT pool to go to the Internet. However I have an external site which will only allow access from a predefined address. How do I allow all users going to this one external address use the same (predefined) address and the nat pool for all other access ?

PIX 525

tohuang · ‎03-09-2003

Hi,

I think you can use global (outside) 1 interface and nat (inside) 1 0 0 command , so that all the internal users will be using outside interface ip address as PAT address to go out.

Another words, you have to tell the external site to allow the address coming from outside interface ip address of the pix.

Thanks

Tony Huang

shannong · ‎03-10-2003

You cannot control NAT based on destination addresses. You can, however, control NAT based on the inside source address using the example the other poster suggested by using an ACL with you [nat] statement.