Hi,
You have mentioned that only Host B is going to initiate a session to Host A.
Your conditions.
1) B should see A as 10.10.10.200
2) A should see B as 172.32.1.2
Hence the flow will be as follows
Step 1
******
B will send a packet to A, in this packet, the destination of A will be 10.10.10.200
Step 2
******
This packet will traverse the ASA from outside to inside, so a static NAT should be configured in the ASA to translate the destination address to the original address of A.
Static ( inside, outside) 10.10.10.200 172.16.1.23 netmask 255.255.255.255
This is correct.
Step3
*****
This packet will now hit the inside interface of the PIX.
Here the source ip will be 172.16.7.5( Original address of Host B) and the destination ip will be 172.16.1.23
Now this PIX needs to translate the source ip of this packet to 172.32.1.2
Hence here also you need to have a static nat configured as follows
static ( inside, outside) 172.32.1.2 172.16.7.5 netmask 255.255.255.255
Only then PIX will translate the source ip from 172.16.7.5 to 172.32.1.2
If you configure PAT in this PIX, it will only alter the destination ip, not the source ip. But what we want acheive at this stage is translate the source ip of B.
As host A is residing in the outside segment of PIX, Host A cannot initiate a session to B unless you have a explicit ACL in the PIX. By default traffic from outside to inside segment will be blocked in PIX.
Hope this clarifies the concepts involved in your requirement.
Rate the post if you find them helpful.
-VJ
