The higher sec levels can communicate to lower sec levels using their
untranslated addresses by doing something like the following:

static (inside,dmz) 172.16.0.0 172.16.0.0 netmask 255.255.0.0 0 0

-mike

On Tue, 20 Feb 2001, Joseph Bannon wrote:

> How can you not use NAT on a PIX? Doesn't NAT have to be used to allow
> higher security levels to lower levels?
>
> I just got a PIX for our network and it's really puzzling. I only have one
> router. Do I need two?

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to