The statement NAT and GLOBAL is used for inside to outside communication.
STATIC is used for outside to inside communication. No longer holds true but it is a good rule to keep you straight. Check out ios PIX 6.2, they have removed the rules as we know it. You can now do a satatic (outside,inside) or a nat 1 (outside) x.x.x.x Cool stuff Thanks Rob Mears III, CCNP, MCSE, CNE, NNCDS, NNCSS, NNCPS, MCP+I, A+ Technical Mercenary Valor Telecom.com -----Original Message----- From: Ole Drews Jensen [mailto:[EMAIL PROTECTED]] Sent: Monday, June 03, 2002 12:43 PM To: [EMAIL PROTECTED] Subject: RE: PIX - Why NO glaobal (outside) command [7:45676] NAT and GLOBAL is used for inside to outside communication. STATIC is used for outside to inside communication. Since the device(s) we're talking about seems to be a server/service of some kind located on your inside network, you use the NAT 0 to let the server communicate outbound with the same (unNATed) IP address, and you use STATIC with the same IP for global and local so outside clients can access the services running on the server. Hth, Ole ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Ole Drews Jensen Systems Network Manager CCNP, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ http://www.RouterChief.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Need a Job? http://www.OleDrews.com/job ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -----Original Message----- From: Karagozian Sarkis [mailto:[EMAIL PROTECTED]] Sent: Monday, June 03, 2002 11:02 AM To: [EMAIL PROTECTED] Subject: RE: PIX - Why NO glaobal (outside) command [7:45676] Thanks Ole, I just noticed the nat 0 .... Here is how this old PIX is configured: nat (inside) 0 216.119.xx.0 255.255.255.0 0 0 static (inside,outside) 216.119.xx.0 216.119.xx.0 netmask 255.255.255.0 0 0 ------ why same IP for both?? static (websvers,oustide) 216.119.xx.240 216.119.xx.240 netmask 255.255.255.240 0 0 ------- also same IP for both ?? Can u explain. more... Thanks Sarkis Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=45700&t=45676 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
