confusion about nat 0 command

[rawat]

hi
i am configuring PIX with two interfaces: inside(say, 10.1.1.1/24) and outside (say 10.1.2.1/24). also assume that 10.1.1.x/24(like 10.1.2.x/24) is routable in the entire network (outside of PIX). now i want to use all 10.1.1.x range to communicate outside but without being PATTed to 10.1.2.x i.e i want to use nat (inside) 0 10.1.1.0 255.255.255.0 and static (inside,outside) 10.1.1.2 10.1.1.2.i think i don't have to configure global command. now my doubt is that whether PIX will allow such a configuration? i.e outside address is in 10.1.2.x/24 network with clients are in 10.1.1.x/24 network that want to go outside with same IP and should be accessible from outside with the same IP.
help help

sanjay rawat

 

[yizhar]

HI.

I think that if you use nat 0, then you don't need this:
static (inside,outside) 10.1.1.2 10.1.1.2
But I'm not sure.

You just need to configure TCP/IP routing so that the routers will forward packets to 10.1.1.x via the pix outside interface.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar