PROBLEMS WITH NAT

[josechirinos]

I have a 3 nic's in the pix, the third nic's is the dmz where there are three servers with NAT. I need that this servers can conect to each others through the public address, but they only do with the internal address. If anyboy know how to do this please help me.

Thanks in advanced.

[csmith]

I don't believe this is possible when the PIX the server next hop and providing the address translation service - a packet cannot be received and sent back out the same interface of a PIX based on the firewall security architecture.

Additionally, if the server address is being resolved via name resolution (i.e. Windows), it is probably occuring via broadcast which will return the local (internal) address, not the global (public) address.

Good luck

[dave.thornton]

Take a look at the ALIAS command

this allows you to access internal systems via their external global addresses