CiscoPiX can pass transparent traffic between inside and outside interface

[dian.it]

Hello,

I Have a B Class Internet valid addresses, mi PIX firewall have internet valid Address in outside and inside interface, i want to pass transparent traffic(No nat, no restrictions) between inside and outside interface. I can do that ?

Thanks

[steve.barlow]

Yes you can.

You can do it so there is no NAT (use the command "nat (inside) 0") used at all for all your IPs or only no NAT for select IPs.

Eg. no NAT for select IPs: access-list 101 permit ip 10.0.0.0 255.0.0.0 192.168.1.0 255.255.255.0 global (outside) 1 200.200.200.3-200.200.200.62 netmask 255.255.255.192 nat (inside) 0 access-list 101 nat (inside) 1 10.0.0.0 255.0.0.0 0 0 or no NAT for all your internal IPs: nat (inside) 0 0 0

Don't forget your acls as well. Hope it helps.

Steve

[dian.it]

Steve,

thak you I want to know, if i make this change, pix will make "Basic Router Function" between interfaces (Inside And Outside): that is a host in Internet can access my hosts in inside network and my hosts in inside network can see transparent any host in Internet.

Best regards

Herberto.