if there are no address translations then 

for connections initiated from outside to internal
network, is "static" command needed ? (I am providing
an access list for connections initiated from the
outside network though, anything else needed ??)


--- John Green  wrote:
> this setup is simple with two networks
>  with no address translations anywhere.
> 
>  10.1.1.0/24 -------PIX------- 10.1.2.0/24
> 
>  i have put in two access lists, one each for both
>  interfaces
>  access-list access_in permit ip any any
>  access-list access_out permit ip any any
> 
>  access-group access_in in interface security0
>  access-group access_out in interface security100
> 
> provided the nat 0 command as well for both
> interfaces
> nat (inside) 0 0.0.0.0 0.0.0.0 0 0
> nat (outside) 0 0.0.0.0 0.0.0.0 0 0
> 
> 
> since there are no address translations etc there is
> no static command given. right ?
> 
> i am having a problem with this set up. can someone
> let me know what exactly is the problem here. 
> 
> 
> __________________________________________________
> Do You Yahoo!?
> Sign up for SBC Yahoo! Dial - First Month Free
> http://sbc.yahoo.com
[EMAIL PROTECTED]


__________________________________________________
Do You Yahoo!?
Yahoo! Health - Feel better, live better
http://health.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=49846&t=49800
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to