First of all, you have a NAT (INSIDE) statement with a 123.123... address - shouldn't that have been a NAT (DMZ), or do you have more than one network connected to the same (INSIDE) interface?
Let me know what networks you have, and what interface they're connected to. Ole ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Ole Drews Jensen Systems Network Manager CCNP, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ http://www.RouterChief.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Need a Job? http://www.OleDrews.com/job ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -----Original Message----- From: Arni V. Skarphedinsson [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 6:52 AM To: [EMAIL PROTECTED] Subject: PIX + NAT Question [7:41022] I am having problems to get a certain configuration to work with my PIX, I use NAT for all network to a Public IP address range, then I also use PAT for my 10.100.0.0 network so all machines comming from that network use the public address ending with .50. Now I need to use PAT for a client that is not on the 10.100.0.0 network, I have tried to add a NAT statment just for that client, and that does not work, the client always uses the NAT statment and not the PAT ?? any thoughts ? here is the config global (outside) 1 212.100.128.100-212.100.128.200 global (outside) 2 212.100.128.50 global (dmz) 1 123.123.148.150 nat (inside) 0 access-list 100 nat (inside) 2 123.123.144.251 255.255.255.255 0 0 nat (inside) 2 10.100.0.0 255.255.0.0 0 0 nat (inside) 1 0.0.0.0 0.0.0.0 0 0 nat (dmz) 1 0.0.0.0 0.0.0.0 0 0 Best regards, Arni V. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41030&t=41022 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
