Source AND destination NAT

[Marc.Halleux]

Hi,

For our setup, we need to nat source AND destination. Here is what we configured.

global (UNMAN_CUST) 100 interface

nat (outside) 100 access-list outside_pnat_inbound outside

static (UNMAN_CUST,outside) x.x.x.x y.y.y.y netmask 255.255.255.255

But, when i do some test from outside to UNMAN_CUST, i see my destination is well translated, but not my source.

Is there a way to do this on a pix?

We are in version 7.0(4)

Regards,

Marc.

[shawnmchenry]

Marc,

It called bi-directional NAT.

Here is a helpful link:

http://www.ciscotaccc.com/security/showcase?case=K17683163

[Marc.Halleux]

Hi Shawn,

Thank you for that link, but what i need to do, is really have the source and destination both natted while crossing the pix.

e.g.:

Packet coming from outside:

SOURCE: 192.168.1.1, DESTINATION : 192.168.2.1

Packet after crossing the firewall while it enter the internal network:

SOURCE: 192.168.3.1, DESTINATION : 192.168.4.1

This is possible with other vendor like Netscreen or others, but i can't do it on PIX.

Regards,

Marc.