cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
322
Views
0
Helpful
3
Replies

possible pix proxy arp

h.wall
Level 1
Level 1

This question may just be my ignorance but I need to find an answer. I recently installed a pix 520 and now any data my 2000+ client pc's sends to the outsdie world has the ip address of my pix. I would like to have it so my clients keep their ip address. This is for my public side which all pc's have legit public ip's. Thanks

3 Replies 3

jmia
Level 7
Level 7

Harris,

Sorry but don't quite follow your question, are you saying that when your internal clients send traffic outside, it is being translated to your pix outside IP address? If so, this is okay, your pix is NAT'ing all your internal IP's to a public IP address also known as many-to-one translation. Or have I misread your question?

Jay

The firewall is translating(natting) the internal clients to its outside address of the firewall. My internal clients all have public ip's. My vendors then send me reports on which clients hit their data bases and how many times. I also want it that way for law enforcement reasons. It is a public library I work for. Thanks in advance.

You probably have something like this on your PIX:

global (outside) 1 interface

nat (inside) 1 int_net mask

You can:

1. nat (inside) 0 int_pc_net mask

2. Static (outside,inside) int_pc_net mask int_pc_net mask

Review Cisco Networking for a $25 gift card