ropakalns wrote:
I have red that there is no diffrence between static (inside, outside) and static (outside, inside), but
as I have seen, static (outside,inside) inside IP outside IP does not work for me, maybe somebody knows why? For the same reason I don't 100% believe that the mentioned entries make a return path correct, but I might be wrong with understanding this.
Anyway, looks fine for me. What's the problem - does it not work for you? If so, have you the correct ACL applied? But yes, the syntax is static (inside,outside) outside inside
Roberts
Roberts
There is a big difference between static (inside,outside) and static (outside,inside) eg.
static (inside,outside) 192.168.5.1 172.16.5.1 netmask 255.255.255.255 means
1) traffic coming from the inside host with a source IP of 172.16.5.1 will be translated to a source IP of 192.168.5.1 as it leaves the outside
2) traffic coming from the outside with a destination IP of 192.168.5.1 will be translated to a desination IP of 172.16.5.1 as it leaves the inside
static(outside,inside) 192.168.5.1 172.16.5.1 netmask 255.255.255.255 means
1) traffic from the inside with a destination IP of 192.168.5.1 will be translated to a destination IP of 172.16.5.1 as it leaves the outside
2) traffic coming from the outside with a src IP of 172.16.5.1 will be translated to a src IP of 192.168.5.1 as it leaves the inside
it's basically to do with whether you translate the source or destination IP and the direction.
Jon
