Just use static (inside, outside) 172.16.20.0 172.16.20.0 netmask
255.255.255.0
and then create conduits for the type of traffic you want to allow from the
outside to the inside.
-- Lidiya White
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Azhar Teza
Sent: Thursday, October 03, 2002 1:27 PM
To: [EMAIL PROTECTED]
Subject: PIX Scenerio [7:54824]
In this PIX Scenerio, What will be the best option. Note: PIX is being
used between the two Private networks. I am just treating the outside
interface as one of the users' subnets. I have 10 users on outside interface
(Network 192.168.40.0) want to have an acess to the some resources in the
inside (Network 172.16.20.0). Instead of statically mapping each IP address
from the users to the inside resources, can I justdo this: static (inside,
outside) 192.168.40.0 172.16.20.0 netmask 255.255.255.0, and then apply
conduit For Example, conduit permit tcp host 192.168.40.5 (User's IP
address) 172.16.20.5 (File Server) and so on, or will it be better to
statically map each user ip address to the resource ip address, and then
open the conduit static (inside, outside) 192.168.40.5(user's computer)
172.16.20.5 (File Server) netmaks 255.255.255.255. I think I can't
statically map the actual user IP address. I am gonna have to use an unused
IP address from the user's subnet (192.168.10.0). Please let me know.
Thanks,
Changed your e-mail? Keep your contacts! Use this free e-mail change of
address service from Return Path. Register now!
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=54854t=54824
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
