Re: urgent PIX help

From: Stylen (globalfx@xxxxxxxxxxxxxx)
Date: Mon Oct 02 2000 - 11:05:51 GMT-3


   
if you use the global command and specify a single address the PIX will do
PAT by default, usually what u want to do is specify 2 global statements,
the first uses a range of addresses so thet NAT will be used, the second
will specify a single address for PAT, to catch the overflow from the NAT
translated devices if you have more machines needing access to the internet
than you have public addresses.

Richard Foltz, CCNP, CCNP-Voice, CCDP, MCSE+I, Network+, A+
Technical Solutions Consultant
Sprint ENS

-----Original Message-----
From: Vijay Venkatesh <vijay.venkatesh@usa.net>
To: Tony Medeiros <tonygreat@home.com>
Cc: Jim Bond <trycisco@yahoo.com>; ccielab@groupstudy.com
<ccielab@groupstudy.com>
Date: Monday, October 02, 2000 3:25 AM
Subject: Re: urgent PIX help

>with a 5.1.2 I beleive you should be able to use the outside interface
>for PAT. Try it with global ip statement and state 0 0.
>
>Vijay.
>
>
>Tony Medeiros wrote:
>>
>> Nope, On a PIX you need at least 2 addresses. On a router you can
overload
>> the address on the interface but not a PIX. No way around it yet unless
the
>> newest software (5.2.1) lets you do it. I haven't messed with this new
>> version yet. You would think that the new small PIX (506) should let you
do
>> this because it's aimed at the home user or small office with a DSL or
cable
>> connection. Most cable and DSL company's use a form of DHCP for dynamic
>> address assignment these days.
>> Tony Medeiros
>>
>> ----- Original Message -----
>> From: "Jim Bond" <trycisco@yahoo.com>
>> To: <cisco@groupstudy.com>
>> Cc: <ccielab@groupstudy.com>
>> Sent: Sunday, October 01, 2000 9:35 PM
>> Subject: urgent PIX help
>>
>> > Hello,
>> >
>> > I have only 1 ip address assigned by my ISP, how can I
>> > use PIX to do NAT? Looks like PIX requires at least 2
>> > outside ip addresses, one for outside interface, one
>> > for PAT. Is there a way to use only 1 ip address?
>> >
>> > Thanks in advance.
>> >
>> >
>> > Jim
>> >



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:22 GMT-3