[c-nsp] PIX NAT question

Joseph Jackson JJackson at aninetworks.com
Fri Feb 2 18:28:11 EST 2007


I believe you can do the NAT (never done it the same way but close) but
the static isn't possible since you can't have the same ip on two
differnet interfaces.  

> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net 
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Voll, Scott
> Sent: Friday, February 02, 2007 3:11 PM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] PIX NAT question
> 
> Can I use the same nat pool out multiple interfaces?
> 
>  
> 
> IE>>
> 
>  
> 
> Currently I have a setup like this
> 
>  
> 
> Global (outside) 1 x.x.x.1-x.x.x.254 netmask 255.255.255.0
> 
> Nat (inside) 1 0.0.0.0 0.0.0.0
> 
>  
> 
>  
> 
> Can I also add
> 
>  
> 
> Nat (DMZ5) 1 0.0.0.0 0.0.0.0?
> 
>  
> 
> The idea is having a different customer that wants access to 
> our network
> but the security of being on a DMZ rather then the outside.
> 
>  
> 
> I also am going to want to be able to do this
> 
>  
> 
> Static (inside,outside) 198.x.x.2 10.y.y.17 netmask 255.255.255.255
> 
> And then
> 
> Static (DMZ5,outside) 198.x.x.2 10.y.y.17 netmask 255.255.255.255
> 
>  
> 
> Does anyone do this?  Is this tac supported?
> 
>  
> 
> Scott
> 
>  
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 



More information about the cisco-nsp mailing list