static nat

[aksher]

hi all

can we change the port no. of global and local ip address while giving the static pat command.

thanks

aksher

[sachinraja]

Hi aksher

yeah you can.. you can have an outside port and can be redirected to an inside port...

eg... static (inside,outside) tcp 10.1.2.45 80 20.20.20.1 8080 netmask 255.255.255.255

here, the outbound requests come on port 8080 and are redirected to port 80

hope this helps.. all the best..

Raj

[aksher]

hi raj

thanks and one more basic dout is what's the significance of using netmask 255.255.255.255 over

others.

thanks in advance

aksher

[sachinraja]

Hi aksher,

thats just the network mask used for the local and the global IPs.. for single static host entries, its normally a /32 on the statement.. doesnt really matter for a static though..

Raj

[aksher]

hi raj

u mean we can use any mask in static command.

what does the following command signify

static (inside,dmz1) 172.16.0.0 172.16.0.0 netmask 255.255.0.0 0 0

is it that the dmz1 can access the inside network?

but if there is static nat means there should be an ACL out command know that's in our case there should be an ACL dmz1 command know?

thanks