Re: Static nat to a distant network?

["Paul Melson" <pmelson () gmail com>]

-----Original Message-----
Subject: [fw-wiz] Static nat to a distant network?

> Is it possible to do a static nat from my outside interface to a host
which is one hop away from my dmz 
> interface by just putting it in normally:
>
> static (dmz,outside) 10.1.1.200 10.1.3.200
>
> where:
>          outside = 10.1.1.199
>          dmz = 10.1.2.199
>          distant network 10.1.3.0/24

To be clear, the issue is that you want to NAT a server that is local to
your PIX's dmz interface to its outside interface?  And there's a router
between the PIX's dmz interface and the server?  If that's the case, then
yes, this will work just fine.

PaulM


_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards