12-30-2004 10:13 AM - edited 02-20-2020 11:50 PM
This question may just be my ignorance but I need to find an answer. I recently installed a pix 520 and now any data my 2000+ client pc's sends to the outsdie world has the ip address of my pix. I would like to have it so my clients keep their ip address. This is for my public side which all pc's have legit public ip's. Thanks
12-30-2004 10:21 AM
Harris,
Sorry but don't quite follow your question, are you saying that when your internal clients send traffic outside, it is being translated to your pix outside IP address? If so, this is okay, your pix is NAT'ing all your internal IP's to a public IP address also known as many-to-one translation. Or have I misread your question?
Jay
12-30-2004 12:06 PM
The firewall is translating(natting) the internal clients to its outside address of the firewall. My internal clients all have public ip's. My vendors then send me reports on which clients hit their data bases and how many times. I also want it that way for law enforcement reasons. It is a public library I work for. Thanks in advance.
12-30-2004 12:30 PM
You probably have something like this on your PIX:
global (outside) 1 interface
nat (inside) 1 int_net mask
You can:
1. nat (inside) 0 int_pc_net mask
2. Static (outside,inside) int_pc_net mask int_pc_net mask
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide