No PAT from Higher Sec to Lower Sec interface

Discussion in 'Cisco' started by Clemens Schwaighofer, Oct 20, 2005.

  1. I am a bit at a loss here.

    I have three networks on my pix: inside, outside and a dmz. I want to
    have traffic from inside to the dmz bet masquerarded (visiable as a dmz
    ip to the dmz boxes) and vica versa (dmz traffic to the inside should be
    seen with an inside ip).

    I have right now these nat sets.

    nat (inside) 0 access-list inside_outbound_nat0_acl
    nat (inside) 10 192.168.0.0 255.255.0.0
    nat (bcc) 0 access-list dmz_outbound_nat0_acl
    nat (bcc) 10 172.16.0.0 255.255.0.0

    from both I can access outside so there the Masquerading works. but
    inbweteen I see the others box IP instead of the masqueraded one.

    eg from an inside box to dmz I do
    #> telnet dmz_ip 21

    and I see in the netstat -an view on the dmz box the inside ip
    (192.168...) and not the PIX GW ip (172.16....).

    Same with the other way around

    So what can I do, to make this happen?

    --
    Clemens Schwaighofer
    [an empty void]
     
    Clemens Schwaighofer, Oct 20, 2005
    #1
    1. Advertisements

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.
Similar Threads
  1. jonnah
    Replies:
    1
    Views:
    2,393
    mcaissie
    Apr 21, 2004
  2. AM
    Replies:
    4
    Views:
    1,617
  3. Replies:
    0
    Views:
    1,442
  4. Replies:
    4
    Views:
    4,444
  5. BinSur
    Replies:
    4
    Views:
    6,362
    BinSur
    Jan 13, 2006
  6. Desmond
    Replies:
    5
    Views:
    1,474
    Bob D.
    Sep 27, 2003
  7. Mark
    Replies:
    3
    Views:
    782
  8. dmurray14

    Help! ASA5510 Lower to Higher

    dmurray14, Mar 14, 2008, in forum: Cisco
    Replies:
    7
    Views:
    2,415
    Markus Marquardt
    Mar 16, 2008
Loading...