"Because I am using a private range, I need to address a packet from a
private IP address and to internet / from internet to a private ip address.
Which would not work. Because 1700 would not do nat"
You are correct. I will setup access lists and the IP Inspect on the router.
Should I just disa
We do not have any more live IP address to use, I would need two more, one
on the inside of the router and one on the outside of the pix.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=74252&t=74141
--
**Please support GroupStudy b
3 12:52
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: RE: PIX and Router Setup Question [7:74141]
Tell me if I am wrong: (off my hat)
Nat on pix only would cause me to use the 1700 as router/ routed subnet
between pix>1700.
Because I am using a private range, I need to address a packet from a
priv
Aan: [EMAIL PROTECTED]
Onderwerp: RE: PIX and Router Setup Question [7:74141]
You'd be better off just using NAT on the PIX, it's what it was made for.
Then just secure the 1721 as a perimeter router. NAT'ing twice could cause
problems.
-Original Message-
From: Michael Barnh
I would let the Firewall handle the NATing. If you just want the router to
perform NAT, you need to use NAT 0 on the PIX. The border router should
only do basic filtering and routing.
>
> From: "Michael Barnhart"
> Date: 2003/08/18 Mon PM 11:06:03 EDT
> To: [EMAIL PROTECTED]
> Subject: PIX and
You'd be better off just using NAT on the PIX, it's what it was made for.
Then just secure the 1721 as a perimeter router. NAT'ing twice could cause
problems.
-Original Message-
From: Michael Barnhart [mailto:[EMAIL PROTECTED]
Sent: 19 August 2003 04:06
To: [EMAIL PROTECTED]
Subject: PIX
Just disable the nat function on PIX for inside network using the nat 0
command...the traffic will reach the router with private source IP where u
can nat...
Chirag Arora
-Original Message-
From: Michael Barnhart [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 19, 2003 8:36 AM
To: [EM
Hi!
If there is not another reason, which you didn't mention, the easiest method
to solve your problem, if you do not configure NAT on PIX. In this case
internal adresses will be seen by the router, so you have to configure the
router to NAT the web and e-mail servers in statioc way, and to know a
8 matches
Mail list logo
