As I said earlier TAC suggests using the
static (inside, outside) 129.174.1.0 129.174.1.0

instead of
nat (inside) 0 0 0

I found in real world the nat 0 can be very unstable.  My problems were with
5.X and 6.X.  nat 0 stopped working after 10 minutes even after multiple
reboots.  static has worked for 6 months without a single failure.

Maybe the problem is having the NAT command and the static command at the
same time. They are telling the PIX to do the same thing twice.  I now I get
annoyed when my wife tells me to do the same thing twice.

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 19, 2001 1:56 PM
To: [EMAIL PROTECTED]
Subject: RE: How to disable NAT in Cisco PIX? [7:29641]


Hello David,

I think your config should work, too. But here are a few suggestions
nevertheless:

1. use "nat (inside) 0 0 0" instead of "nat (inside) 0 129.174.1.0
255.255.255.0"
2. delete "static (inside, outside) 129.174.1.0 129.174.1.0", it's not
really needed.
3. Like Ejay said, do a traceroute. You mentioned that "connectivity is
fine", does that mean pings and traces work, just not http?

Alex




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=29706&t=29641
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to