No PAT from Higher Sec to Lower Sec interface

Discussion in 'Cisco' started by Clemens Schwaighofer, Oct 20, 2005.

  1. I am a bit at a loss here.

    I have three networks on my pix: inside, outside and a dmz. I want to
    have traffic from inside to the dmz bet masquerarded (visiable as a dmz
    ip to the dmz boxes) and vica versa (dmz traffic to the inside should be
    seen with an inside ip).

    I have right now these nat sets.

    nat (inside) 0 access-list inside_outbound_nat0_acl
    nat (inside) 10 192.168.0.0 255.255.0.0
    nat (bcc) 0 access-list dmz_outbound_nat0_acl
    nat (bcc) 10 172.16.0.0 255.255.0.0

    from both I can access outside so there the Masquerading works. but
    inbweteen I see the others box IP instead of the masqueraded one.

    eg from an inside box to dmz I do
    #> telnet dmz_ip 21

    and I see in the netstat -an view on the dmz box the inside ip
    (192.168...) and not the PIX GW ip (172.16....).

    Same with the other way around

    So what can I do, to make this happen?

    --
    Clemens Schwaighofer
    [an empty void]
    Clemens Schwaighofer, Oct 20, 2005
    #1
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. AM
    Replies:
    4
    Views:
    812
  2. Stefan Patric

    Re: better to lower resolution or higher compression?

    Stefan Patric, Sep 5, 2003, in forum: Digital Photography
    Replies:
    2
    Views:
    335
    Morgan Ohlson
    Nov 18, 2003
  3. Eigenvector

    Re: better to lower resolution or higher compression?

    Eigenvector, Sep 6, 2003, in forum: Digital Photography
    Replies:
    6
    Views:
    468
    Morgan Ohlson
    Nov 18, 2003
  4. Monica Krowley

    Re: better to lower resolution or higher compression?

    Monica Krowley, Sep 7, 2003, in forum: Digital Photography
    Replies:
    2
    Views:
    346
  5. Eolake Stobblehouse
    Replies:
    0
    Views:
    439
    Eolake Stobblehouse
    Sep 7, 2003
Loading...

Share This Page