PIX Nat help

From: Bill Faber (BFaber@wvadmin.gov)
Date: Tue Apr 19 2005 - 22:47:39 GMT-3

• Next message: Jake Secrist: "RE: PIX Nat help"
• Previous message: Sam Joseph: "RE: ipv6: SLA and subnet ID"
• Next in thread: Jake Secrist: "RE: PIX Nat help"
• Maybe reply: Jake Secrist: "RE: PIX Nat help"
• Maybe reply: Bill Faber: "RE: PIX Nat help"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Guys,

I need some assistance. We are implementing a URL blocker and I am
trying to put nat statements into the PIX to reflect the addresses we
need to global PAT.

I need to have 10.25.X.32 - 10.25.X.191 PAT to a single IP. Here is
what I tried using:

1>global (outside) 302 10.200.176.2 netmask 255.255.255.0
2>nat (inside) 302 10.25.2.32 255.255.255.128
3>nat (inside) 302 10.25.2.160 255.255.255.224

I get this warning message:
WARNING: IP address <10.25.2.32> and netmask <255.255.255.128>
inconsistent
And the PIX inserts line two as 10.25.2.0 255.255.255.128.

I am need of some guidance. Any words of wisdom?

Bill

• Next message: Jake Secrist: "RE: PIX Nat help"
• Previous message: Sam Joseph: "RE: ipv6: SLA and subnet ID"
• Next in thread: Jake Secrist: "RE: PIX Nat help"
• Maybe reply: Jake Secrist: "RE: PIX Nat help"
• Maybe reply: Bill Faber: "RE: PIX Nat help"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Tue May 03 2005 - 07:55:02 GMT-3