As I said earlier TAC suggests using the static (inside, outside) 129.174.1.0 129.174.1.0
instead of nat (inside) 0 0 0 I found in real world the nat 0 can be very unstable. My problems were with 5.X and 6.X. nat 0 stopped working after 10 minutes even after multiple reboots. static has worked for 6 months without a single failure. Maybe the problem is having the NAT command and the static command at the same time. They are telling the PIX to do the same thing twice. I now I get annoyed when my wife tells me to do the same thing twice. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 19, 2001 1:56 PM To: [EMAIL PROTECTED] Subject: RE: How to disable NAT in Cisco PIX? [7:29641] Hello David, I think your config should work, too. But here are a few suggestions nevertheless: 1. use "nat (inside) 0 0 0" instead of "nat (inside) 0 129.174.1.0 255.255.255.0" 2. delete "static (inside, outside) 129.174.1.0 129.174.1.0", it's not really needed. 3. Like Ejay said, do a traceroute. You mentioned that "connectivity is fine", does that mean pings and traces work, just not http? Alex Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29706&t=29641 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]