Pix to Pix config

[echelon360]

Hi,would appreciate any help you can give on this

I have two pix connected together via the same interface e3

Pix A

interface e3 10.1.1.2 sec10

Pix B

interface e3 10.1.1.1 255.25.255.248 sec15

interface e1 172.16.25.1 255.255.255.128 sec100

I need a host in interface e1 from Pix B to get to Pix A

What i have done

disabled nat in PIX A bet e3 and e1

static (e1,e3) 172.16.25.0 172.16.25.0 255.255.128

What else should i be doing??Pls advise

[krishnas]

I think same result can be accomplished with identity NAT or NAT-0 ACL on PIX. I think you should be able to find configuration examples for this on CCO.

HTH,

krishna

[NUNO PIMENTA]

Hi there,

The fastest way to achive that is using NAT 0 .. and in my personal opinion, the best.. like this:

PIX B - access-list routing permit ip any any

access-list routing permit icmp any any

Nat(inside) 0 access-list routing

Perform the same in PIX A and you will see it works.

Remember that this is a fast way. The correct way you should use NAT 0 access-list with more restriction, and also diferent access-lists to apply to each interface you wanna protect.

Regards

Nuno