Just use "static (inside, outside) 172.16.20.0 172.16.20.0 netmask 255.255.255.0" and then create conduits for the type of traffic you want to allow from the outside to the inside.
-- Lidiya White -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Azhar Teza Sent: Thursday, October 03, 2002 1:27 PM To: [EMAIL PROTECTED] Subject: PIX Scenerio [7:54824] In this PIX Scenerio, What will be the best option. Note: PIX is being used between the two Private networks. I am just treating the outside interface as one of the users' subnets. I have 10 users on outside interface (Network 192.168.40.0) want to have an acess to the some resources in the inside (Network 172.16.20.0). Instead of statically mapping each IP address from the users to the inside resources, can I justdo this: static (inside, outside) 192.168.40.0 172.16.20.0 netmask 255.255.255.0, and then apply conduit For Example, conduit permit tcp host 192.168.40.5 (User's IP address) 172.16.20.5 (File Server) and so on, or will it be better to statically map each user ip address to the resource ip address, and then open the conduit static (inside, outside) 192.168.40.5(user's computer) 172.16.20.5 (File Server) netmaks 255.255.255.255. I think I can't statically map the actual user IP address. I am gonna have to use an unused IP address from the user's subnet (192.168.10.0). Please let me know. Thanks, ------------------------------------------------ Changed your e-mail? Keep your contacts! Use this free e-mail change of address service from Return Path. Register now! Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=54854&t=54824 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]