01-22-2007 01:29 AM - edited 03-11-2019 02:22 AM
outside = 10.10.10.1 /24
inside = 172.16.0.1 /24
Dmz = 192.168.0.1 /24
nat (inside) 0 0.0.0.0 0.0.0.0
If i have a connection established from an inside host (172.16.0.100) to an outside server (10.10.10.50) will i need to issue the clear xlate command if i then add a DMZ no nat rule and i want to connect to the same outside server from the dmz
nat (dmz) 0 0.0.0.0 0.0.0.0
The reason i ask is that I am unable to issue the "clear xlate" command due to change management controls.
01-22-2007 08:47 AM
You should be able to just clear xlate for that host entry instead of a global clear xlate command. This would avoid an interupt in service for the rest of your network hosts.
01-23-2007 05:10 PM
Hello neil,
Do the DMz hosts, already existing on the network with some statics or nat before??? If this is a new configuration or interface, i believe, u dont need to do a clear xlate, as there are will be no translations for the clients on the DMZ.. nat 0 from inside will be on the nat table, but will not clash on the nat table created by the DMZ hosts....
If nat entry already exists, you have to do a clear xlate and as told by fellow netpro engineer, u can do it with a particular host.. no other go !!
Hope this helps.. all the best..
Raj
01-28-2007 05:50 AM
there is no need to do clear xlate. In the first case you connect from an inside host, in the second from the DMZ. There are separate xlate slots.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide