RE: PIX Firewall, Help with nemask use in NAT and Global comands

["Victor Williams" <vbwilliams () essvote net>]

I think what he wants is (in additional to the global command):

nat (inside) 1 192.168.10.10 netmask 255.255.255.255 0 0

 
Victor Williams 


-----Original Message-----
From: firewall-wizards-admin () honor icsalabs com
[mailto:firewall-wizards-admin () honor icsalabs com] On Behalf Of Melson, Paul
Sent: Friday, May 07, 2004 7:57 AM
To: Adel Guia Cruz; firewall-wizards () honor icsalabs com
Subject: RE: [fw-wiz] PIX Firewall, Help with nemask use in NAT and Global
comands


For PAT for outbound browsing, use:

global (outside) 1 interface

For your one-to-one NAT, you would typically use:

static (inside,outside) 190.190.190.195 192.168.10.10 netmask
255.255.255.255 0 0

But I'm not sure I understand your question or your objection to using
'static'.  Are you saying that you want a public IP address outside the
firewall to appear as an IP address on the local subnet?  

PaulM

> -----Original Message-----
> I want to translate only one  IP address from inside, for
> example 192.168.10.10,  to one IP address from outside 
> 190.190.190.195, so static NAT from inside to outside will be 
> perform. I no want to use the static command because the 
> translation is from inside to outside.
>  
> Inside -----------------NAT------------------> Outside
> Host 192.168.10.10------NAT--------------> 190.190.190.195
_______________________________________________
firewall-wizards mailing list firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards