[c-nsp] PIX NAT question
Joseph Jackson
JJackson at aninetworks.com
Fri Feb 2 18:28:11 EST 2007
I believe you can do the NAT (never done it the same way but close) but
the static isn't possible since you can't have the same ip on two
differnet interfaces.
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Voll, Scott
> Sent: Friday, February 02, 2007 3:11 PM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] PIX NAT question
>
> Can I use the same nat pool out multiple interfaces?
>
>
>
> IE>>
>
>
>
> Currently I have a setup like this
>
>
>
> Global (outside) 1 x.x.x.1-x.x.x.254 netmask 255.255.255.0
>
> Nat (inside) 1 0.0.0.0 0.0.0.0
>
>
>
>
>
> Can I also add
>
>
>
> Nat (DMZ5) 1 0.0.0.0 0.0.0.0?
>
>
>
> The idea is having a different customer that wants access to
> our network
> but the security of being on a DMZ rather then the outside.
>
>
>
> I also am going to want to be able to do this
>
>
>
> Static (inside,outside) 198.x.x.2 10.y.y.17 netmask 255.255.255.255
>
> And then
>
> Static (DMZ5,outside) 198.x.x.2 10.y.y.17 netmask 255.255.255.255
>
>
>
> Does anyone do this? Is this tac supported?
>
>
>
> Scott
>
>
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
More information about the cisco-nsp
mailing list