cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
625
Views
0
Helpful
1
Replies

PIX - static, port redirection and Identity NAT

a.manosca
Level 4
Level 4

PIX version 6.2

In a separate post, I was able to get a confirmation that the following PIX configuration will work:

static(inside,outside) tcp 172.18.124.10 <AAAA> 10.1.1.10 <BBBB> netmask 255.255.255.255 0 0

static(inside,outside) tcp 172.18.124.10 <CCCC> 10.1.1.10 <CCCC> netmask 255.255.255.255 0 0

static(inside,outside) tcp 172.18.124.11 <AAAA> 10.1.1.11 <BBBB> netmask 255.255.255.255 0 0

static(inside,outside) tcp 172.18.124.11 <CCCC> 10.1.1.11 <CCCC> netmask 255.255.255.255 0 0

I don't have a PIX with me right now so I would greatly appreciate it if somebody could

confirm that the following config will be accepted by the PIX:

static(inside,outside) tcp 10.1.1.10 <AAAA> 10.1.1.10 <BBBB> netmask 255.255.255.255 0 0

static(inside,outside) tcp 10.1.1.10 <CCCC> 10.1.1.10 <CCCC> netmask 255.255.255.255 0 0

static(inside,outside) tcp 10.1.1.11 <AAAA> 10.1.1.11 <BBBB> netmask 255.255.255.255 0 0

static(inside,outside) tcp 10.1.1.11 <CCCC> 10.1.1.11 <CCCC> netmask 255.255.255.255 0 0

I found separate PIX sample configurations for Port Redirection and Identity NAT but not for both.

[Identity NAT]

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/s.htm#wp1026694

[Port Redirection]

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094aad.shtml#topic9

Thanks in advance for any help.

Ariel

1 Reply 1

nkhawaja
Cisco Employee
Cisco Employee

This should work. Don't confuse with identity NAT here, this is port redirection mainly.

Thanks

Nadeem

Review Cisco Networking for a $25 gift card