Link to home
Start Free TrialLog in
Avatar of andreacadia
andreacadia

asked on

Static NAT PIX

I need to do a static NAT for public ip to a private ip on my network.  The firewall wan is 56.1.1.1 and i have an additional 56.1.1.2.  Private ip = 192.168.1.1.

I need to do PAT for the outside interface so that certain port request on 56.1.1.1 are PATed back to different devices on the inside and also have 56.1.1.2 translate to 192.168.1.1 on a one to one basis.

Can someone provided a sample including access-list please?
ASKER CERTIFIED SOLUTION
Avatar of stressedout2004
stressedout2004

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of andreacadia
andreacadia

ASKER

how about if i just did this:

access-list acl_out permit ip any host 65.113.90.25

??
That's fine, however it is not recommended. By doing that, you are opening all ports to the internet on that host.
now does this necessarily mean that all traffic will exit sourced as the natted public ip in this case?
Avatar of Les Moore
If you have a static 1-1 nat then yes, that host will exit sourced as the natted public.