Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Cisco > Cisco PIX 515: Map virtual ip to real one

Reply
Thread Tools

Cisco PIX 515: Map virtual ip to real one

 
 
alessio.pompigna@gmail.com
Guest
Posts: n/a
 
      09-01-2006
Hello,

we have a PIX515 with two eth interfaces, inside on network
192.168.9.0/24 and outside on 10.10.24.0/24.
We need users on inside to reach an internet proxy on outside with ip
address 10.10.24.50, and would like that the users could point to a
virtual ip on their network, such as 192.168.9.3. We should have
something like the following

inside --> 192.168.9.3 -NAT to 10.10.24.50 --> outside

Could you please help?

Thanks,
A.

 
Reply With Quote
 
 
 
 
Ivo Mangiavacchi
Guest
Posts: n/a
 
      09-01-2006

> inside --> 192.168.9.3 -NAT to 10.10.24.50 --> outside


static(inside, outside) 10.10.24.50 192.168.9.3 netmask 255.255.255.255

Cheers

--
http://www.mangiavacchi.eu

 
Reply With Quote
 
 
 
 
Walter Roberson
Guest
Posts: n/a
 
      09-02-2006
In article <(E-Mail Removed) .com>,
<(E-Mail Removed)> wrote:

>we have a PIX515 with two eth interfaces, inside on network
>192.168.9.0/24 and outside on 10.10.24.0/24.
>We need users on inside to reach an internet proxy on outside with ip
>address 10.10.24.50, and would like that the users could point to a
>virtual ip on their network, such as 192.168.9.3. We should have
>something like the following


>inside --> 192.168.9.3 -NAT to 10.10.24.50 --> outside


If I understand you correctly, you want people to be able to
address 192.168.9.3 but have that end up going to 10.10.24.50.

If so, then the other poster's reply of

static (inside,outside) 10.10.24.50 192.168.9.3 netmask 255.255.255.255

will NOT work. That command would take incoming packets
with a *destination* address of 10.10.24.50 and send them to
internal destination 192.168.9.3, which isn't what you want.

What you need is PIX 6.1 or later, and

static (outside,inside) 192.168.9.3 10.10.24.50 netmask 255.255.255.255

This command would take outgoing packets with destination
192.168.9.3 and send them on to outside destination 10.10.24.50 .
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Virtual inheritace -- when one inheritance of the base is virtual andthe other isn't. pauldepstein@att.net C++ 1 03-14-2009 03:45 PM
How can map more than one url-pattern to one filter or servlet? lightning Java 0 08-05-2008 06:58 AM
how to put the content of one hash map to another hash map navS C++ 3 05-09-2008 12:52 PM
product of real and (integer)(after converted to real one) value - vhdl found fatal error senthil VHDL 5 01-24-2004 04:37 AM
PIX to PIX to PIX meshed VPN Richard Cisco 1 11-15-2003 07:41 AM



Advertisments