Question

Natting in PIX ???

Features/Functionality

Hi Members,

I have a requirement for accessing one of our server in inside segment using nat ip from inside segment.

I have configured static nat but it is only for those connections initiated from outside and not from inside.

Connections initiated from outside (internet) to this natted ip of my inside server works fine . However one of our application from inside needs to communicate to the natted ip of a server in inside segment.

As to my knowledge , pix doesnot have this feature and seems to be a limitation.

Has anyone got a diff: opinion or work around ?

Many Thanks.

I am not really sure off your design. But PIX has no problem Natting between any subnets.

Are both of these networks connected into diffrent interfaces in the PIX.

Like Inside, Outside, DMZ1, DMZ2 etc.

The Security setting that you place on the firewall manages whether you need to nat. When going from lower security to higher security etc.

Look at the Global and Nat commands in the PIx. These should help. Use the Static when you are comingfrom outside to inside as you are.

Also, cisco has some great DOC's on Natting in the PIX.