Pix 501 NAT with Local to Local IP address.

Posted on 2007-08-01
Last Modified: 2013-11-16
Good day all experts!!!
I have another easy question for you Cisco guys. I am just not seeing the right solution no matter what I try.

I have a Pix 501.
Normal configuration with a few RDP connections nothing too exciting.
I set up an IPSEC site to site Tunnel. It is working great as far as connecting.
I have a server that is
I have been requested to put in a NAT statement that points all traffic coming to to NAT to

I tried using a simple static command like:
static (inside,inside)
That doesn't seem to do the trick. I am rusty on the PIX as I haven't worked on one in a couple of years.

Lead me in the right direction of how to NAT  a local to a local address, where to put the commands what commands they are and so forth. An article on the subject would be great as well. Not just a NAT article but maybe a step by step.

I know that is a huge request in the details, but just any help at all would be appreciated.

Thank you!!!
Question by:sscottincanyon
    LVL 57

    Accepted Solution

    Im confused - you  cant NAT a local address to a Local address on the same interface what are you trying to do ?
    LVL 2

    Author Comment

    Ok, well I didn't think so either, but I wanted to be sure.

    Here is what I need:
    I have an IPSEC tunnel setup between two locations.
    I am at the main location.
    The remote location needs to be able to hit, but going to the IP address They already have a client setup on, so they requested that I NAT the traffic from to, so that they are using as the IP that they communicate with.

    I hope that helps, I am so sorry for the confusion, please ask anything at all to help clarify it even more.

    Thank you!!!
    LVL 28

    Assisted Solution

    by:Jan Springer
    A shot in the dark: is an available IP in your network:

    Add to the network interface card of your server as a secondary IP address and make sure that the app is either bound to any address or both addresses so that it's reachable.

    If the secondary address does not arp on the pix, you can create an arp entry manually.
    LVL 32

    Expert Comment

    Jesper's comment above should solve the issue without having to work or make any configuration on the pix.

    LVL 32

    Expert Comment

    Hey Pete,

      Looked at

    How did ya do it man, gr8 one. Mind sharing ?

    LVL 2

    Author Comment

    Ok here is what I did:
    I was unable to get away with adding the secondary IP address to the card with what the remote customer wanted to do.
    So I setup a ACL with the IP address and ports needed, and then added a static entry to that access list. Works like a charm.

    I don't know how to give you the points, when clearly I didn't use the solution. So how about I just divide it all down the middle, since you did take the time to help me out, and I REALLY appreciate the time and energy you guys put into all this.

    Thank you,
    Shon R. Scott

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    This article will cover setting up redundant ISPs for outbound connectivity on an ASA 5510 (although the same should work on the 5520s and up as well).  It’s important to note that this covers outbound connectivity only.  The ASA does not have built…
    Envision that you are chipping away at another e-business site with a team of pundit developers and designers. Everything seems, by all accounts, to be going easily.
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now