NAT for outside/inside global address

[amdcent]

Hi,

How do i specify port range for global inside or outside address?

amdcent

[srittenberg]

specify for what use? open port for incoming traffic? blocking ports? Global command is for NAT in a global sense. are you sure you are not looking at a static ip and port mapping?

[wvaux]

What you will need to do to configure your NAT pull is the following:

global (outside) 1 192.168.101-192.168.0.254

global (outside) 1 192.168.100

The first is your range for regular users. the second ip address is in case you run out of the first and users will use PAT with it.

That is the configuration just insert your external ip address range that you would like to use instead of the 192.168

[srittenberg]

are you sure he was asking for the IP range? He specified the port range. there is port range command on global, may be he means something else.

[wvaux]

I read it as IP range...its basically the same way, i wouldn't recommend setting a port range i'd say give the PIX the ip address and let it pick the ports that way you have less of a chance of overlapping a port in use by something else.